#ai-coding-agent

0 stories this week · 0 this month · 3 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

OpenCode versions 1.14.30 through 1.18.21 let a malicious site run code on a developer's machine via the local upgrade API.

Datadog demonstrates remote code execution in OpenCode AI coding agent via content-type confusion in the /global/upgrade endpoint, fixed in 1.18.22.

11 min readopencode rce

Zhipu's ZCode AI coding app silently packages workspaces, including full Git history, encrypts them, and uploads to Aliyun OSS.

Stories tagged #ai-coding-agent