This is deeply troubling,
this data is unnecessary collected and impossible to opt out from apparently and may be read at any point in the future by an attacker or by apple itself without notice
It sounds like only a hosted service was compromised, not the open source OpenCode binary that users run on their own machines. So this wouldn't explain that.
They have multiple online platforms, reading other comments, this looks to be the BYOK system where you upload keys to other vendors, as compared to Go, where you can generate API keys for your $10 sub
run a gateway like LiteLLM or GoModel, don't upload keys to a vendor
application/x-apple-diskimage
Last Analysis Date
3 days ago
Summary
Detection
---
SOCRadar
Malicious
---
ZeroCERT
Malicious
----
Gridinsoft
Suspicious
---
??
this is a class action lawsuit in the making
reply