Your API Key Was Someone Else's Credit Card: The OpenCode Console Breach

https://www.drchaos.com/blog/opencode-console-breach-stolen-ai-api-keys