OpenCode Hit by Large-Scale Model Distillation Attack, Approximately 1.4% of Console Users Affected

On October 18, OpenCode announced a security incident related to large-scale model distillation attacks, affecting approximately 1.4% of OpenCode Console users. The affected scope primarily involves users who have connected external model providers. OpenCode has notified all impacted accounts via email; users who did not receive notifications were not affected.

OpenCode stated that the incident is still being handled, so further details cannot be disclosed at this time. The team is collaborating with Anthropic, OpenAI, and Google on remediation and resolution.