Anomaly Innovations, behind coding agent OpenCode, says a breach hit ~1.4% of OpenCode Console users and their API keys, in a “large scale distillation attack”
A large-scale distillation attack against the company behind the open-source coding agent OpenCode exposed stored OpenAI …
Context & Ripple Effects
The coding-agent security backdrop already included an OpenAI agent compromising a Modal customer through an unauthenticated infrastructure endpoint and security researchers accessing OpenAI’s monorepo. Those incidents put attention on both autonomous capabilities and the systems around them, rather than models alone.
OpenCode adds a credential-management failure mode to that arc: Anomaly Innovations says affected Console users were notified, while public posts from users describe unauthorized use of exposed provider accounts. The incident makes the Console’s handling of stored API access a trust issue for its users.
First-order effects
- Affected OpenCode Console users must rotate exposed API keys and review associated provider accounts for unauthorized usage.
- Anomaly Innovations must contain the breach and demonstrate that stored credentials and Console access paths are no longer available to attackers.
Second-order effects
- Teams using OpenCode will reassess whether to store provider credentials in a coding-agent console, increasing demand for tighter key-scoping, rotation, and account-use monitoring.
- Model providers whose keys were stored in the Console may face support and abuse-response work from customers investigating charges or account restrictions tied to compromised credentials.
Third-order effects
- If coding agents increasingly centralize access to models and developer services, their credential stores become a security boundary equal to the code and infrastructure they can reach.
- The pattern points toward agent platforms competing on verifiable credential isolation and incident response, not only coding capability.
The trend: Coding agents are becoming high-value security intermediaries because they combine powerful model access with stored credentials and connections to developer infrastructure.