OpenCode 遭黑客入侵，用户 AI 账户被刷出高额费用
原标题：Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
AI 摘要
开源 AI 编程工具 OpenCode 披露，攻击者夜间入侵其旧系统，影响 OpenCode Console 在线平台 1.4% 的用户，这些用户在该平台存放访问 AI 服务的 API 密钥。部分开发者报告 OpenAI、Anthropic、Google 账户出现数百至上千美元未授权扣费，三家厂商已封禁相关密钥，OpenAI 表示配合恢复访问并退款。OpenCode 将事件定性为大规模蒸馏攻击，但部分质疑者认为该说法缺乏证据。事件还暴露防御方在攻击中调用前沿模型分析恶意代码时被安全过滤器拒绝的问题，Hugging Face 此前也遇到类似情况。
正文节选
OpenCode, an open-source AI coding agent that has been gaining ground among developers as an alternative to Claude Code and Cursor, said Saturday that attackers broke into an older system overnight, affecting 1.4% of users of its online platform, OpenCode Console, where some users store the API keys, or digital passwords, they use to access AI services. As the OpenCode team struggled to keep pace with the attack, the scramble to respond highlighted a growing problem: companies without vetted acc