
OpenCode vulnerability allowed third-party servers to execute commands on Windows
An OpenCode vulnerability allowed malicious or hijacked MCP servers to execute code on Windows or WSL during developer sign-in due to improper escaping in
Tag archive

An OpenCode vulnerability allowed malicious or hijacked MCP servers to execute code on Windows or WSL during developer sign-in due to improper escaping in
OpenCode, the open-source AI coding agent, has told roughly 1.4% of its Console users that the API...

An overnight breach of an older OpenCode system impacted 1.4% of Console users, resulting in unauthorized API charges exceeding $1,000 due to stored servic

An intruder reached a legacy system at OpenCode, potentially exposing third-party AI provider keys saved in the OpenCode Console for 1.4% of users. Some de
Add an OpenAI-compatible endpoint to opencode as a custom provider, then pick deepseek-v4.1-flash or kimi-k3 from /models. Includes a copy-paste opencode.json and a troubleshooting checklist.
Each harness keeps MCP servers in its own file and logs in its own way. Declare a server once, write all three configs, and see where each login breaks.
Originally published at its-tahir.com. If OpenCode's free models fail with "OpenCode's free tier can...
Claude Max and Team include a monthly API credit that interactive Claude Code can't spend. Link a Console org, register the key in OpenCode, check the balance drops, and move your setup over.

A legacy OpenCode system was breached and provider keys saved in Console workspaces may be out. What OpenCode said, what's unknown, and how to rotate.
-- Putting a squad together inside opencode "We few, we happy few, we band of brothers; For he...
Getting Started with OpenCode and DevRelay: Turning Struggle-Sessions into DEV Posts I...
I'm writing this article because i had trouble to change the location where ollama stores the local...