OpenCode Says a Distillation Attack Exposed Stored Provider API Keys for 1.4% of Console Users
OpenCode told 1.4% of Console users to revoke OpenAI, Anthropic and Google keys saved there; the company has not said how the attack worked.
Signal
54 articles covering "AI coding agents"
OpenCode told 1.4% of Console users to revoke OpenAI, Anthropic and Google keys saved there; the company has not said how the attack worked.
Open-source projects have adopted opposing rules for AI-generated contributions, from outright bans to disclosure-optional acceptance, while a Linux Foundation survey puts incoming low-quality AI pull requests at about 25%.
Anthropic's 2.1.299 release notes for Claude Code add idle compaction for long idle terminal sessions and list fixes to sandbox symlink, glob and plugin-directory handling.
Cline's CLI v3.0.71 release notes say plugins now load inside the hub, so no JavaScript runtime is needed on PATH, and describe a new cline hub plugins status command.
GitHub's Copilot CLI changelog lists permissions.limitTo in 1.0.93 and a managed-policy option to disable Assisted Permissions in 1.0.94; GitHub's docs page does not describe either.
Claude Code 2.1.295 adds an opt-in setting that blocks an action when a command or HTTP hook fails; 2.1.294 and 2.1.296 fix hook-enforcement bugs, per release notes.
GitHub made Copilot local sandboxing generally available, added local Ollama model discovery to its CLI, and Microsoft detailed a 53GB on-device MAI Code 1.1 Flash.
GitHub put computer use into public preview in Copilot CLI and the Copilot app on macOS and Windows; it is off by default and asks approval before controlling an app.
Claude Code mods, announced October 1, are plugin-delivered TypeScript functions that can rewrite prompts and block tool calls, and Anthropic says they are not sandboxed.
Claude Code 2.1.284 starts interactive terminal and VS Code sessions in auto mode on every plan and provider, extending a default that began on Pro, Max and Team plans.
Cloudflare's Worker Previews, created with npx wrangler preview, give each Git branch an isolated environment with its own URL, configuration, state and observability.
Sonnet 5.5 arrives in Claude Code at unchanged $2/$10 token pricing; Anthropic reports 70.6% on Terminal-Bench 4.0, up from 10.3% for Sonnet 5.