An r/LocalLLaMA discussion raises an unverified warning about a possible OpenCode compromise. The supplied material contains no incident notice or statement from OpenCode. It also questions whether a “distillation attack” could expose user credentials.

Comments associate the suspected exposure with OpenCode’s hosted service and OpenCode Console. They distinguish that service from local model setups, which commenters generally consider outside the reported scope. The keys mentioned are third-party provider credentials, not necessarily keys for a local model. One commenter says an old Anthropic API key with about $1.50 of credit was stolen.

A Go user reports that a session stopped with a message asking for an API-key change. Logging out and back in restored access. That user had no provider key and received no email. The thread calls for invalidating keys and notifying users. One commenter also recommends changing to another harness. The supplied discussion does not establish whether OpenCode took either action.