Evidence record / opencode
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packages
Eight public malware advisories name third-party OpenCode ecosystem packages. A registry-wide GitHub Advisory Database query, including type=malware, finds records absent from the repository’s three-entry advisory index. On 2026-10-16T18:49:06Z all versions (>=0) of seven exact packages were listed: @beloved-lenora/opencode-shared-rpc (GHSA-8c9g-fwgq-rqq5); @beloved-lenora/opencode-shell-guard (GHSA-pm76-w63j-7j29); @beloved-lenora/opencode-btw (GHSA-xv54-6gmc-3xph); @beloved-lenora/opencode-stats (GHSA-f4h2-68pg-ffhj); @beloved-lenora/opencode-goal (GHSA-c78h-wwhq-g6j8); @beloved-lenora/opencode-todo (GHSA-9rjq-6mhc-46c5); @beloved-lenora/opencode-orchestrator (GHSA-7wq2-8pc2-wm26). GHSA-9855-prwc-mfp2, published 2026-10-22T18:35:11Z, names opencode-skills-collection versions 4.0.56, 4.0.57, 4.0.77, 4.1.0, 4.1.1, 4.1.3, 4.1.4, 4.1.6, 4.1.7, 4.1.8, 4.1.9, 4.1.10, 4.1.11, 4.1.12, 4.1.13, 4.1.14, 4.1.16, 4.1.17, 4.1.18, 4.1.19 and 4.1.20. Every advisory’s exact record and affected ranges were independently re-read by the write-up author through the GitHub API at 2026-10-24T10:37:32.653958Z.
Channel: docs-only. Half: defect. Date: 2026-10-22.
Operator consequence: These records identify malicious packages that can give an outside party control of the installing/running machine and expose its keys. For a machine that installed a listed package/version, the canonical response is host-compromise handling and key rotation from a separate clean machine, not merely an OpenCode CLI upgrade. The records do not identify the payload or prove compromise of @opencode/cli, opencode-ai, @opencode-ai/cli, the Console, or the separately alleged Copilot-auth plugin. Those identities must remain distinct.
Receipt
- https://github.com/advisories/GHSA-8c9g-fwgq-rqq5
- https://github.com/advisories/GHSA-pm76-w63j-7j29
- https://github.com/advisories/GHSA-xv54-6gmc-3xph
- https://github.com/advisories/GHSA-f4h2-68pg-ffhj
- https://github.com/advisories/GHSA-c78h-wwhq-g6j8
- https://github.com/advisories/GHSA-9rjq-6mhc-46c5
- https://github.com/advisories/GHSA-7wq2-8pc2-wm26
- https://github.com/advisories/GHSA-9855-prwc-mfp2
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packages
Source links
Primary links, including exact changelog lines when available.
- official docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-8c9g-fwgq-rqq5official docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-pm76-w63j-7j29official docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-xv54-6gmc-3xphofficial docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-f4h2-68pg-ffhjofficial docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-c78h-wwhq-g6j8official docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-9rjq-6mhc-46c5official docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-7wq2-8pc2-wm26official docs2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packagesgithub.com/advisories/GHSA-9855-prwc-mfp2
Versioned source: run artifact