OpenCode Console hack exposes API keys, users report unauthorized AI charges

OpenCode Console, a platform for managing AI API keys, was breached overnight, affecting 1.4% of users. Attackers exploited leaked keys to run up unauthorized charges on accounts from OpenAI, Anthropic and Google, with some users reporting hundreds or over $1,000 in costs. The incident highlights vulnerabilities in AI model access for users in restricted regions.