{
 "id": "AIR-2026-0339",
 "slug": "malicious-commit-deploys-destructive-ai-agent-in-amazon-q-ex",
 "title": "Malicious Commit Deploys Destructive AI Agent in Amazon Q Extension",
 "summary": "A malicious actor abused compromised repository credentials to push code that made the Amazon Q VS Code extension deploy a destructive agent. Amazon identified and mitigated the issue before widespread unauthorized system cleanup occurred.",
 "type": "attack_on_ai",
 "categories": [
  "supply_chain",
  "agent_hijack"
 ],
 "severity": 3,
 "targets": [
  "Amazon",
  "framework_or_tooling"
 ],
 "products": [
  "Amazon Q Developer",
  "Amazon Q VS Code Extension"
 ],
 "incident_date": "2025-07-13",
 "incident_date_precision": "day",
 "first_reported": "2026-01-30",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0047",
   "publisher": "MITRE ATLAS",
   "title": "Code to Deploy Destructive AI Agent Discovered in Amazon Q VS Code Extension",
   "published_at": "2026-01-30"
  },
  {
   "url": "https://aws.amazon.com/security/security-bulletins/AWS-2025-015",
   "publisher": "aws.amazon.com",
   "title": "AWS Security update regarding the Amazon Q VS Code extension incident",
   "published_at": "2026-01-30"
  },
  {
   "url": "https://github.com/aws/aws-toolkit-vscode/commit/1294b38b7fade342cfcbaf7cf80e2e5096ea1f9c",
   "publisher": "GitHub",
   "title": "GitHub commit containing the malicious prompt",
   "published_at": "2026-01-30"
  },
  {
   "url": "https://medium.com/@ismailkovvuru/the-amazon-q-vs-code-prompt-injection-explained-impact-and-learnings-for-devops-3a9d2f752dea",
   "publisher": "medium.com",
   "title": "Medium article detailing the events of the Amazon Q VS Code extension incident",
   "published_at": "2026-01-30"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8217",
   "publisher": "NVD",
   "title": "CVE detailing the Amazon Q Developer VS Code Extension Vulnerability",
   "published_at": "2026-01-30"
  },
  {
   "url": "https://404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent",
   "publisher": "404 Media",
   "title": "404 Media report on the Amazon Q VS Code extension incident",
   "published_at": "2026-01-30"
  }
 ],
 "source_count": 6,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "supply_chain",
  "agent_hijack",
  "amazon_q",
  "vs_code"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}