A large-scale distillation attack against the company behind the open-source coding agent OpenCode exposed stored OpenAI, Anthropic and Google API keys for a subset of developer workspaces, prompting an urgent round of key rotations across the developer community. Anomaly Innovations, the company formerly known as SST that builds OpenCode, confirmed the breach from its official account, saying the incident was "related to a large scale distillation attack" that impacted roughly 1.4% of OpenCode ...