行业多源确认

OpenCode 发生安全漏洞,用户 Anthropic 账户遭未授权扣费

精选理由

用 OpenCode 的注意了,有用户 Anthropic 账户被刷了 400 美元,1.4% 的 Console 用户受影响,赶紧检查自己的 API 密钥。

OpenCode 确认至少 1.4% 的 Console 用户受到安全事件影响。泄露源于第三方对其一个正在下线的旧系统的未授权访问,存放在工作区中的第三方 API 密钥可能被暴露。有用户报告出现未授权 API 扣费,其中一例 Anthropic 账户被消费 400 美元。

原文 · kimmonismus

OpenCode users are reporting unauthorized API charges after a security breach, including one report of $400 spent on an Anthropic account.

OpenCode confirms that at least 1.4% of Console users were affected. Its customer email warns that third-party provider keys stored in workspaces may have been exposed through unauthorized access to a legacy system being shut down.