Key Info
An OpenCode developer says the project is targeted by hundreds of distinct attack attempts every day, citing a PlanetScale OAuth flow modified to send credentials to an attacker.
Highlights
- The example given is an OAuth flow for PlanetScale altered to exfiltrate credentials to an attacker.
- The team reports seeing hundreds of completely different attempts daily.
- The post frames this as a sample of the kinds of abuse the project deals with.
- No specific mitigations, timelines, or affected-user numbers were disclosed.
