
Software Engineering Daily SED News: OpenCode, AI Code vs. Shipped Code, and the LiteLLM Breach
17 snips
Apr 2, 2026 They discuss ARM’s comeback as CPUs become viable local AI compute for agentic workloads. A supply-chain compromise in LiteLLM that leaked API credentials is explored. The rise of OpenCode as an open-source coding alternative is covered. Tensions between Anthropic and OpenAI over Pentagon deals and enterprise positioning are examined. Hacker News curiosities like Doom over DNS and a salvaged Tesla computer are highlighted.
AI Snips
Chapters
Books
Transcript
Episode notes
Dependencies Can Leak LLM API Keys At Scale
- Supply chain attacks now target LLM API keys embedded in developer tooling, raising both theft and abuse risks.
- Gregor Vand and Sean Falconer discuss LiteLLM compromise that extracted thousands of API credentials via a dependency takeover.
Open Source Agentic Coding Tools Are Gaining Traction
- OpenCode and other open-source agentic dev tools are rising as free/local alternatives to paid cloud options.
- Gregor Vand notes trade-offs: OpenCode uses ~1GB RAM, heavy TypeScript, while Codex variants use Rust for speed.
Anthropic Versus OpenAI Is A Market Positioning Moment
- The Pentagon contract spat exposed divergent vendor positioning: Anthropic emphasizes restraint and enterprise trust while OpenAI appears open to government use.
- Gregor Vand says Anthropic refused clauses allowing surveillance/autonomy, costing the contract.





