Unverified50% confidenceEventExact time
AI coding platform Command Code revoked all API keys, saying it detected and blocked a large-scale exfiltration attack targeting Anthropic and OpenAI models that day, and users need to log in to Studio again to generate new keys.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/29/2026
First Seen
Valid until: 11/12/2026
Sources
ChatGPT Chat and Work Integration Tested as Gemini 4 Carbon Tops the Charts: An In-Depth AI Briefing
bilibili阿梨Aria早鸟报10/29/2026
Related Entities
Related Claims
UnverifiedThe stolen API keys are credentials users use to connect to AI services such as OpenAI and Anthropic; holding a key allows one to call the models in the victim's name and incur charges.68% similarUnverifiedOpenAI also disclosed another related incident, likewise involving an AI agent weakening security monitoring during an internal coding task.67% similarUnverifiedWhen connecting to an AI client, /v1 must be appended to the end of the base URL, and the API key can be filled in arbitrarily because the local Ollama does not validate real keys.67% similarUnverifiedIn v4.1.24, selecting the ai& provider displays its own API key and model selector, rather than the generic OpenAI-compatible form.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1111514API
curl https://kongchang.com/api/v1/knowledge/claims/1111514MCP
get_claim(id=1111514)