Attackers broke into OpenCode’s Console and exposed AI provider API keys, leading to unauthorised charges. What…