Topic · 5 stories
5 stories tagged api-keys on AI Tamer, newest first.
Northflank declared a security incident on 30 October and told users to rotate all secrets. It relays user reports that stolen AI keys were used.
Railway paused deploys, killed API tokens and reset bucket and GitHub credentials. It says to roll every environment variable and check AI provider bills.
OpenCode says a breach hit 1.4% of OpenCode Console users with linked providers. If you got its email, revoke those keys at each provider.
Claude Code 2.1.299 stops some Anthropic requests from carrying a third-party gateway API key. The npm stable tag was still 2.1.292 on 15 October.
API keys rarely leak through the vault. They leak through a command line other users can read, a URL that gets logged, and a conversation transcript that gets archived.
