--- title: OpenCode discloses a breach, Replit drops Anthropic as... description: OpenCode disclosed a security breach tied to a distillation attack that drained API keys for about 1.4% of its Console users, while Replit's CEO says ChatGPT... canonical: https://daily.dev/posts/opencode-discloses-a-breach-replit-drops-anthropic-as-default-0wms9um9j twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: OpenCode discloses a breach, Replit drops Anthropic as default | daily.dev og:description: OpenCode disclosed a security breach tied to a distillation attack that drained API keys for about 1.4% of its Console users, while Replit's CEO says ChatGPT... og:url: https://daily.dev/posts/opencode-discloses-a-breach-replit-drops-anthropic-as-default-0wms9um9j og:image: https://api.daily.dev/og/posts/0WmS9uM9j.png og:image:alt: OpenCode discloses a breach, Replit drops Anthropic as default og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # OpenCode discloses a breach, Replit drops Anthropic as default **[Agentic Digest](https://daily.dev/sources/agents_digest)** · 4 min read · 1 upvotes · 0 comments ## Summary OpenCode disclosed a security breach tied to a distillation attack that drained API keys for about 1.4% of its Console users, while Replit's CEO says ChatGPT has replaced Claude as the default model in Replit Agent. Anthropic's own internal report shows junior hiring collapsing and employees expecting AI to absorb 75% of their work by 2030. On the infra side, Anthropic built a new centralized version control system to handle a 12x jump in daily merges driven by agents. Jev's decision-model wave keeps accelerating, but a HiddenLayer test found it's just as exploitable as any other LLM once you let it touch a browser. ## Content **TLDR:** OpenCode disclosed a security breach tied to a distillation attack that drained API keys for about 1.4% of its Console users, while Replit's CEO says ChatGPT has replaced Claude as the default model in Replit Agent. Anthropic's own internal report shows junior hiring collapsing and employees expecting AI to absorb 75% of their work by 2030. On the infra side, Anthropic built a new centralized version control system to handle a 12x jump in daily merges driven by agents. Jev's decision-model wave keeps accelerating, but a HiddenLayer test found it's just as exploitable as any other LLM once you let it touch a browser. --- ## OpenCode breach tied to API key theft affects 1.4% of Console users OpenCode disclosed a breach it's attributing to a large-scale distillation attack, with about 1.4% of Console users affected. The company says attackers got into a legacy system being decommissioned, and stored third-party API keys for OpenAI, Anthropic, and Google may have been exposed and drained. Anthropic has already revoked affected Claude keys; if you've ever saved a key in OpenCode, rotate it now, since a stolen bearer key just works like cash attached to an HTTP header. [Read more](https://daily.dev/posts/cUiXmnFYh) ## Replit swaps Claude for ChatGPT as its default coding model Replit CEO Amjad Masad announced at TechCrunch Disrupt that OpenAI's models now power Replit Agent by default, replacing Anthropic's Claude, citing cost and performance. Internal benchmarks reportedly favor OpenAI on vibe-coded app generation, though sources close to the Anthropic partnership dispute the framing and say the deal remains in place. Masad also shared that enterprise revenue grew from roughly 2% to 15% year-over-year and now makes up over half of Replit's business. [Read more](https://daily.dev/posts/DWx4Lw3uU) ## Anthropic's internal numbers: fewer juniors, more meetings, 75% automation expected by 2030 Anthropic published an internal report on how AI is reshaping work inside the company. Junior technical hires dropped from 27% to 9% of new hires, and Claude sessions reportedly spend about 80% of their time idle waiting on human review. Meeting time is up 20% year-over-year even as employees expect AI to handle 75% of their current work by 2030 — the humans, not the models, are now the bottleneck. [Read more](https://daily.dev/posts/bhtSoKjLq) ## Anthropic replaces Git with a centralized system built for agent-scale merge volume Anthropic built an internal version control system called Scion because its monorepo's daily merges grew from about 2,500 in May to over 30,000 by September, driven by automated agent commits. Unlike Git's offline-first design, Scion assumes clients are always online and keeps history on a central server, cutting compute use 200x versus their old git mirrors and freeing up a quarter of their test infrastructure. They're not releasing it, but shared the design since other teams running agentic workloads at scale will likely hit the same wall. [Read more](https://daily.dev/posts/j2oxFRZb2) --- ## Also notable - **Jev gets vision, boxes, and a security warning in the same week:** TypeSafe shipped Jev 1.14.0 with image input, bounding-box outputs, and long-context support, but HiddenLayer separately found a Jev-powered browser agent could be tricked into clicking a malicious button via indirect prompt injection — proof that "never hallucinates" doesn't mean "can't be fooled." [Read more](https://daily.dev/feed-by-ids?id=mWQR5iGQX&id=5sheK6MwX) - **Claude Code's AI-written driver beats the human-written upstream one:** A Red Hat engineer had Claude Code diff a captured Windows USB driver trace against a Linux attempt until they matched, producing a scanner driver that runs in 34.6 seconds versus 54.4 seconds for the eventual official upstream driver. [Read more](https://daily.dev/posts/uapZIWh1M) - **Postgres 19 slips to November 19 after 11 features get pulled:** PostgreSQL 19's release moved from October to November 19, with 13 release-note items including SQL/PGQ graph queries and online checksums reverted after beta 1, partly because LLM-assisted code review surfaced a longer tail of edge-case bugs than usual. [Read more](https://daily.dev/posts/eGMqydnX3) - **Claude now writes about 90% of Claude Code's own code:** Anthropic says Claude generates roughly 90% of the code in Claude Code itself, and merged PRs more than doubled between June and September without an increase in revert rate. [Read more](https://daily.dev/posts/LJhExi0Dx) - **Minified JSON prompts cut LLM call latency up to 30%:** Snapkin's engineering blog found seven of ten tested models pretty-print JSON by default, wasting up to 34% of output tokens on whitespace, and a single system-prompt instruction asking for minified output dropped Gemini 4 Argon's response time from 30.5s to 21.4s. [Read more](https://daily.dev/posts/Ete7XRrZ8) ## Similar posts on daily.dev - [Replit is no longer working with Anthropic, CEO says](https://daily.dev/posts/replit-is-no-longer-working-with-anthropic-ceo-says-dwx4lw3uu) · TechCrunch · 1 upvotes · 0 comments - [Why 157,000 developers are hedging against Anthropic with OpenCode](https://daily.dev/posts/why-157-000-developers-are-hedging-against-anthropic-with-opencode-myktaoppc) · The New Stack · 8 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#anthropic](https://daily.dev/tags/anthropic), [#opencode](https://daily.dev/tags/opencode) [View this post on daily.dev](https://daily.dev/posts/opencode-discloses-a-breach-replit-drops-anthropic-as-default-0wms9um9j) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/opencode-discloses-a-breach-replit-drops-anthropic-as-default-0wms9um9j","headline":"OpenCode discloses a breach, Replit drops Anthropic as default","text":"OpenCode disclosed a security breach tied to a distillation attack that drained API keys for about 1.4% of its Console users, while Replit's CEO says ChatGPT has replaced Claude as the default model in Replit Agent. Anthropic's own internal report shows junior hiring collapsing and employees expecting AI to absorb 75% of their work by 2030. On the infra side, Anthropic built a new centralized version control system to handle a 12x jump in daily merges driven by agents. Jev's decision-model wave keeps accelerating, but a HiddenLayer test found it's just as exploitable as any other LLM once you let it touch a browser.","url":"https://daily.dev/posts/opencode-discloses-a-breach-replit-drops-anthropic-as-default-0wms9um9j","datePublished":"2026-10-18T04:17:33.940Z","dateModified":"2026-10-18T04:17:52.459Z","author":{"@type":"Organization","name":"Agentic Digest","logo":"https://media.daily.dev/image/upload/s--V91DY4ls--/f_auto,q_auto/v1772617267/logos/agents_digest","url":"https://daily.dev/sources/agents_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/agents_digest","name":"Agentic Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Agentic Digest","item":"https://daily.dev/sources/agents_digest"},{"@type":"ListItem","position":3,"name":"OpenCode discloses a breach, Replit drops Anthropic as default"}]} ```