# OpenCode Console Breach: Your Provider Keys, Their Custody
# Optimus Labs · Civilizations — https://optimuslabs.io/research/briefings/opencode-console-breach-provider-key-exposure
# Published: 2026-10-17 | Severity: high
# Affected: OpenCode, Anomaly, Anthropic, OpenAI, Google
#
# Machine-readable siblings:
#   STIX 2.1: https://optimuslabs.io/research/briefings/opencode-console-breach-provider-key-exposure.stix.json
#   MISP event: https://optimuslabs.io/research/briefings/opencode-console-breach-provider-key-exposure.misp.json
#   Markdown: https://optimuslabs.io/research/briefings/opencode-console-breach-provider-key-exposure.md

# No machine-extractable atomic indicators in this briefing.
# See the narrative indicators section in the Markdown export.

## narrative-indicators
# Email subject: Action Required: Potential provider key breach
# Provider-side signal: Google project suspension for abusive activity consistent with hijacked resources
# Exposure window start: Oct 17 2026 00:30 UTC per OpenCode's follow-up email
# No CVE assigned to this incident