# Ukuphulwa Kwe-OpenCode Console: umkhawulo othintekile, iziqinisekiso zabahlinzeki kanye nezivivinyo ezisebenzayo

Published: 2026-10-18

I-OpenCode ibika ukuphulwa okuthinta i-1.4% yabasebenzisi be-Console, ikakhulukazi ingxenye encane enabahlinzeki bangaphandle abaxhunyiwe. Isaziso somphakathi asidaluli indlela yokufinyelela kanye nokulungiswa okwenziwe. Lokhu kulandelela kuchaza umkhawulo wesango olotshiwe, bese ihlola ihuku yokuhlola ukuqonda kwe-Sphinx kanye nesivumelwano sokuphepha sokunikeza imidwebo sika-Pele.

Canonical: https://thedailydiff.dev/zu/video/2026-10-18-opencode-console-breach/

## Lokho okuhlanganiswa yile vidiyo

- Inani le-1.4% lisebenza kubasebenzisi be-Console; ukufaka i-ejenti yokubhala yendawo kuphela akusho ukufakwa engxenyeni encane ebikiwe ethintekile.
- Imibhalo yabahlinzeki be-Console ithi igcina iziqinisekiso ezixhunyiwe ngemuva kwesango layo. Lokhu kuyisakhiwo esilotshiwe, hhayi ukubuyisela emuva indlela yokuphulwa engadalulwanga.
- Buyekeza isaziso esisemthethweni nomsebenzi womhlinzeki; ukugcina ubufakazi nokuhoxisa iziqinisekiso ezisolisayo kuyisikhali esijwayelekile sokuhlanzeka kwezehlakalo, hhayi uhlu lokuhlola olusha oluphelele olumenyezelwe.
- I-Sphinx ithumela ikhodi eshintshiwe nezimpendulo kumhlaziyi ohlukile, ishintsha indlela ye-Git hook yomhlaba wonke, futhi ayinakho ukugunyazwa okuyisisekelo kokubiza imodeli. Umhloli wayo angaba nephutha futhi izivivinyo zendawo zingeqa.
- I-Pele isekela izinguquko ze-CSS ku-SVG efanayo. Ukuqhathanisa kwayo isivinini kubikwa umthengisi; izithombe zisengakhipha izicelo zenethiwekhi futhi umaki wezithonjana ohlinzekwe umshayeli uhlala uyisibopho sohlelo lokusebenza.
- Ukuncibilikisa kuchaza injongo okusolwa ukuthi ihilela okukhiphayo kwemodeli; indlela yokufinyelela yesigameko, ubunikazi bomhlaseli kanye nomthelela ophelele wekhasimende kuhlala kungadalulwanga.

## Izahluko

- 0:00 Obani abathintekile ngempela?
- 0:39 Yini ngempela echazwa yi-1.4%?
- 1:09 Kuphi lapho kugcinwa khona iziqinisekiso zomnikezeli?
- 1:43 Yini okufanele ihlolwe umsebenzisi othintekile?
- 2:08 Ingabe i-Git hook ingahlola ukuqonda?
- 2:55 Yini ethola umhlaziyi we-Sphinx?
- 3:17 Yini eshintshayo lapho i-Pele inikeza i-Mermaid?
- 3:52 Imiphi imingcele yomdwebo esasekhona?
- 4:15 Yini ngempela echazwa ukucwenga?

## Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

### Obani abathintekile ngempela?

0:00 Uzwe ukuthi i-OpenCode yagebenga futhi ucabanga i-laptop yakho. Isaziso sayo sisho ingxenye encane yabasebenzisi be-Console. Isinqumo sethu sangaphambilini esithi 'NEEDS REVIEW' sifanelwe indaba ephelele. Kule vidiyo, obani abathintekile? Yini okufanele uyihlole? Kungani ilebula elilodwa libalulekile? NgeSonto, Okthoba ishumi nesishiyagalombili, futhi lena i-The Daily Diff. Gcina leyo lebula engqondweni.

0:18 I-OpenCode iyijenti yokubhala ekhululekile yomthombo evulekile yetheminali yakho, umhleli noma ideskithophu. I-Console iyisango layo lemodeli ephethwe ngokuzithandela. Iphinde isebenze ama-akhawunti omhlinzeki owaxhumayo. Isaziso sisho leyo ngxenye ephethwe. Isaziso sasebusuku siholela i-diff yanamuhla. Bese i-Git hook ikubuza ngokuphathelene ikhodi ye-ejenti yakho, kanye nomdwebi wezinhlelo uchaza

0:35 imingcele yayo yokuphepha. Ngokusobala isici esisha sokukhiqiza sifunda. I-OpenCode ithi i-1.4% yabasebenzisi be-Console bathintekile,

### Yini ngempela echazwa yi-1.4%?

0:42 ingxenye encane enabahlinzeki bangaphandle abaxhunyiwe. Ithi bathunyelwe i-imeyili. Lokho umkhawulo wenkampani wamanje, nesigameko sisazoqhubeka. Gcina isihlukanisi sinamathiselwe. Abasebenzisi be-Console yilo bantu. Ubukhulu bayo abudalulwanga, ngakho asikwazi ukubala inani labahlukunyezi. Ukufaka i-ejenti yendawo kuphela akukufaki eqenjini elibikiwe. Umsunguli ogama lakhe lingu-timo uthi ukuphulwa kubaluleke kakhulu kumakhasimende kunelabhula

1:03 lokucwenga. Ukukhathazeka okufanelekile. Abantu bafuna izimpendulo mayelana nama-akhawunti abo ngenkathi i-inthanethi iphikisana mayelana ukuqeqeshwa kwemodeli. Imibhalo yomnikezeli ichaza umkhawulo wokwethemba.

### Kuphi lapho kugcinwa khona iziqinisekiso zomnikezeli?

1:12 I-Console igcina isiqiniseko futhi idlulisa izicelo ngesango layo. Amalungu endawo yokusebenza asebenzisa izimodeli ngaphandle kokubona ukhiye womhlinzeki. Ukuphatha okusebenzayo kubeka isango endaweni okufanele uyethembe. Ungabelana ngokufinyelela ngaphandle kokubeka ukhiye ophezulu kumuntu ngamunye osebenza naye umshini. Iphesenti elincane lingakwazi ukuchaza ukudalulwa okukhulu. Isaziso asihlinzekanga ngencazelo yobuchwepheshe yokuthi ukufinyelela kwatholwa kanjani. Ukumaketha kwezokuphepha kuthanda igama eliduduzayo. Onjiniyela balandela ukuthi iyiphi ingxenye ephethe imfihlo.

1:37 I-Console ifanelwe elinye ibhokisi kumdwebo wakho wengqondo, okuyindlela wonke umdwebo wokwakha okhula ngayo. Hlola isaziso esisemthethweni kanye namarekhodi omsebenzi womhlinzeki.

### Yini okufanele ihlolwe umsebenzisi othintekile?

1:45 Ukuze usebenzise okusolisayo, gcina ubufakazi futhi uhoxise isiqiniseko esidaluliwe ngo- umhlinzeki wakho. Faka esikhundleni izinhlanganisela ezithintekile ngamabomu. Lokho kuyinhlanzeko yesigameko esijwayelekile; isaziso asinakho ikhasimende eliphelele uhlu lokuhlola ukulungiswa. I-OpenCode ithi isebenza ne-Anthropic, I-OpenAI ne-Google ukulungisa. Ayikwazi ukwabelana ngemininingwane eyengeziwe okwamanje. Sizodinga umbiko wakamuva ukuze sihlulele ukulungiswa. Lesi saziso asenzi isithembiso sokubuyiselwa imali esiqinisekisiwe.

### Ingabe i-Git hook ingahlola ukuqonda?

2:08 I-Sphinx inikeza uhlobo oluhlukile lokugada. Iyamisa ukuphushela kwegatsha elivikelekile futhi ibuza ukuthi uyiqonda yini ikhodi ye-ejenti yakho. Isicelo sokudonsa sithole ukuhlolwa ngomlomo. Ukuqedela ngokuzenzakalelayo kwakho kuhlala kuthule ngokusolisayo. Umhlaziyi ohlukile ufunda ushintsho olwenziwe ngezinsiza ze-Git zokufunda kuphela, ngaphandle kokubona ingxoxo ekhiqizayo. Ibuza ngendlela yokuziphatha namacala okuhluleka. Phendula ngokungalungile futhi uthole esinye isimo.

2:30 Dlulisa, bese ukuphusha kwangempela kuyaqhubeka. I-readme ibuza ukuthi kwenzekani lapho isisebenzi senza, bese sishaya phansi ngaphambi kokuvuma umsebenzi wayo. Ukulethwa kabusha kungaphinda umsebenzi. Isibonelo sibonisa; asikayifaki i-Sphinx noma asikalinganisi ukuthuthuka ekubuyekezweni kokukhiqiza. I-Sphinx yolo ikhubaza izivivinyo futhi igcina umlando wokweqa. Ama-hook endawo angenziwa buthaka, futhi i-readme ithi umhloli angaba nephutha.

2:51 Umsizi we-robot wokufundisa unemvume yokuvuma ukuthi iyirobhothi. Ukusetha kushintsha indlela yakho ye-Git hook yomhlaba wonke, kuhlanganise namanye amakhosombe.

### Yini ethola umhlaziyi we-Sphinx?

2:58 Umhlaziyi uthola ikhodi eshintshiwe nezimpendulo zakho. Ukukhishwa kwamagama wefayela akukwazi ukubamba imfihlo efakwe kumthombo ojwayelekile. Funda lokho ngaphambi kokuyithatha. Ayikho i-cap ezenzakalelayo emakholi emodeli. Ukuhlola okuvamile kusebenzisa izicelo ezinhlanu kuya kweziyisishiyagalombili, kanye nesinye ngempendulo ngayinye. Beka imikhawulo yokusebenzisa. Ungakhokha ngelungelo lokuzichaza kabili.

### Yini eshintshayo lapho i-Pele inikeza i-Mermaid?

3:17 I-kepano ye-Obsidian isanda kukhipha i-Pele, eguqula umbhalo we-Mermaid ube yi-SVG. Ephendula unjiniyela onokungabaza, ukhomba eminyakeni eyisithupha yokubhala i-Mermaid izingqikithi. Kunomlando wokugcinwa ngemuva kwesihloko sokwethulwa. Inqwaba yayo ecindezelwe ibikwa cishe ngamakhilobhayithi angamakhulu amabili namashumi amathathu, ngokumelene namamegabhayithi ayi-1.6 e-Mermaid. Isekela izinhlobo zomdwebo ze-Mermaid 12.1. Izimangalo zesivinini yizilinganiso zephrojekthi. Asikayivezi leyo qhathaniso.

3:40 Bhala umbhalo womdwebo, thola i-SVG, bese ushintsha imibala yayo nge-CSS ngaphandle kokuyiveza futhi. Umdwebo ofanayo ugcina ubunikazi bawo. Ukuhlela kwakho kungayeka ukugqoka njengewebhusayithi engahlobene. I-Pele ivikela umbhalo womdwebo futhi ihlunga izixhumanisi.

### Imiphi imingcele yomdwebo esasekhona?

3:54 Izibuyekezo zokuchofoza ze-JavaScript zishaywa indiva. Izithombe zisengenza izicelo zenethiwekhi lapho ziboniswa. Uhlelo lwakho lokusebenza luphethe umaki wesithonjana oluhlinzekayo nokuthi luvula kanjani izixhumanisi zangaphakathi. izixhumanisi. I-Pele ikuvumela ukuthi ukhubaze izixhumanisi nezithombe, ngemikhawulo kumthombo nosayizi wokukhipha. Uhlelo lokusebenza lusenezinto okufanele lwenze. Izindaba ezingezinhle kunoma ubani othembekile ukuthi ukuncika okuncane kuzophinde kunciphise umthwalo wemfanelo. Manje leyo lebula.

### Yini ngempela echazwa ukucwenga?

4:15 Ukuncibilikisa kusho ukuqeqesha imodeli usebenzisa okukhiphayo kwesinye isimodeli. I-OpenCode ihlobanisa ukuphulwa nokuhlasela okukhulu kokuncibilikisa. Leyo yinjongo okusolwa ngayo. Iyakushiya indlela yokufinyelela, ubunikazi bomhlaseli kanye nomthelela ophelele wekhasimende kungadalulwanga. Isinqumo sami sidinga ukubuyekezwa. Ngingagcina isigameko se-Console sibuyekezwa kuze kube singahlola okuthintekile iziphakamiso kanye nokulungiswa. Thola ukuthi iyiphi isevisi ephethe ukufinyelela kwakho kumhlinzeki,

4:39 ngaphambi kokuthi isihloko sikukhethele imodeli yengozi. Uma ungathanda ukufunda lokhu kunokungizwa ngikusho, i-diff ifika ebhokisini lakho leposi njalo ekuseni, mahhala ku-the dailydiff dot dev, isixhumanisi esingezansi. Futhi yilokho okuhlukile kwanamuhla. Ngingu-Niko wase-Axrisi. Hlanganisa ngokuzibophezela.

## Imithombo

- [Latest edited OpenCode Console security notice](https://x.com/opencode/status/2111519637049319818) — OpenCode
- [Connected provider credentials and Console gateway](https://opencode.ai/v2/docs/console/providers/) — OpenCode documentation
- [Console is an optional provider](https://opencode.ai/v2/docs/console/models/) — OpenCode documentation
- [Distillation definition and separate background cases](https://www.anthropic.com/news/detecting-and-preventing-distillation-attacks) — Anthropic
- [Sphinx understanding checks and adoption caveats](https://github.com/parthh01/sphinx) — Sphinx project
- [Pele Mermaid-to-SVG renderer](https://pele.run/) — Pele project
- [Pele security and application responsibilities](https://pele.run/security) — Pele documentation
- [Pele maintainer's public explanation](https://x.com/kepano/status/2111575190081847776) — kepano