Unverified50% confidenceEventExact time
OpenCode confirmed via its official X account that it suffered a security intrusion, with user credentials leaked.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/17/2026
First Seen
Valid until: 10/31/2026
Sources
Related Entities
Related Claims
UnverifiedGoogle、Apple、Microsoft等主流平台均在其安全文档中明确标注备用码一旦泄露相当于账号完全暴露67% similarUnverifiedWhen internal interfaces are accidentally exposed to the public internet, or credentials that should be kept secret are hardcoded in front-end code, the trust boundary is broken, and attackers can impersonate a trusted internal caller to bypass security checks.66% similarUnverifiedA token in an authentication system is a credential that proves a user's identity; once stolen, an attacker can impersonate a legitimate user to access services.66% similarUnverifiedThe XZ Utils attacker built trust over multiple years to ultimately gain project maintainer privileges and insert malicious code.66% similarUnverifiedNyx AI's security limitations are fully documented in a publicly available threat model document, and users can view all legal documents within the app.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1056202API
curl https://kongchang.com/api/v1/knowledge/claims/1056202MCP
get_claim(id=1056202)