A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model ...
Maintainers reckon a quarter of incoming pull requests are slop, rising to 31% on larger projects ...