Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
Source: TechCrunch (opens in a new tab) · Aditya Mehta
Intel Summary
Hackers breached the online platform of open-source AI coding tool OpenCode and stole user API keys, using them to rack up charges on external AI accounts. Remediation efforts faced friction when automated AI analysis tools repeatedly refused to inspect the malicious code.
Why It Matters
The incident demonstrates the financial and operational risks of entrusting third-party developer tools with upstream model API credentials. Affected developers and organisations using OpenCode must immediately rotate compromised API keys, monitor usage spikes, and review credential storage policies.
Organizations & Entities
Related Intelligence
- ReportAlso involving Claude Code
Deepseek V4.1 Flash 1017 beats larger rivals in agentic tasks while once again massively cutting per-task costs
DeepSeek has released V4.1-Flash-1017, an open-weight model that reportedly completes tasks faster, generates shorter outputs, and improves upon its predecessor's benchmarks on agentic tasks. Alongside the model, the company introduced Search and Fetch APIs priced at $0.75 per 1,000 calls, with temporary free access offered for integration in tools like Claude Code and Codex.
The Decoder - ReportAlso involving Cursor
Cursor Staff Investigated Whether Confidential Data Reached SpaceX for AI Training
Engineers at AI coding startup Cursor investigated whether internal testing data, potentially including confidential information from customers, suppliers, and business partners, was transmitted to SpaceX for AI training. The concerns arose in late July during the development of SpaceX's personal AI agent, Grok Bot, amid SpaceX's pending acquisition of Cursor.
The Information - ReportAlso involving Cursor
Oura, World Labs Show Divergence in VC Exits
Advanced Micro Devices has agreed to acquire two-year-old AI startup World Labs in an $8.2 billion all-stock transaction, according to The Information. The deal reflects a broader surge in major AI acquisitions, alongside reported transactions including SpaceX buying Cursor, Nvidia buying Hugging Face, and Stripe acquiring OpenRouter. Andreessen Horowitz held an approximate 14% stake as World Labs' largest shareholder.
The Information - ReportAlso involving Claude Code
Software Firms Discount AI to Keep Customers From Anthropic, OpenAI
According to reporting from The Information, major software vendors and cloud providers including Amazon, Microsoft, Figma, and Workday are offering new discounts on AI products to enterprise clients and consulting partners. The discounting comes as corporate buyers scrutinize software spending and push back against task- or usage-based pricing shifts, having reallocated budgets toward tools such as Anthropic's Claude Code and OpenAI's Codex.
The Information