Malicious Commit Deploys Destructive AI Agent in Amazon Q Extension

# Malicious Commit Deploys Destructive AI Agent in Amazon Q Extension

https://gcdradar.vercel.app/incidents/malicious-commit-deploys-destructive-ai-agent-in-amazon-q-ex · AIR-2026-0339 · closed 2026-02-13

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-01-30 (happened 2025-07-13)
- AI role: Attack on AI
- Products: Amazon Q Developer, Amazon Q VS Code Extension

## Summary

A malicious actor abused compromised repository credentials to push code that made the Amazon Q VS Code extension deploy a destructive agent. Amazon identified and mitigated the issue before widespread unauthorized system cleanup occurred.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-01-30: 404 Media report on the Amazon Q VS Code extension incident (https://404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent)
- 2026-01-30: CVE detailing the Amazon Q Developer VS Code Extension Vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2025-8217)
- 2026-01-30: Medium article detailing the events of the Amazon Q VS Code extension incident (https://medium.com/@ismailkovvuru/the-amazon-q-vs-code-prompt-injection-explained-impact-and-learnings-for-devops-3a9d2f752dea)
- 2026-01-30: GitHub commit containing the malicious prompt (https://github.com/aws/aws-toolkit-vscode/commit/1294b38b7fade342cfcbaf7cf80e2e5096ea1f9c)
- 2026-01-30: AWS Security update regarding the Amazon Q VS Code extension incident (https://aws.amazon.com/security/security-bulletins/AWS-2025-015)

## Sources

- 2026-01-30 MITRE ATLAS: Code to Deploy Destructive AI Agent Discovered in Amazon Q VS Code Extension https://atlas.mitre.org/studies/AML.CS0047
- 2026-01-30 aws.amazon.com: AWS Security update regarding the Amazon Q VS Code extension incident https://aws.amazon.com/security/security-bulletins/AWS-2025-015
- 2026-01-30 GitHub: GitHub commit containing the malicious prompt https://github.com/aws/aws-toolkit-vscode/commit/1294b38b7fade342cfcbaf7cf80e2e5096ea1f9c
- 2026-01-30 medium.com: Medium article detailing the events of the Amazon Q VS Code extension incident https://medium.com/@ismailkovvuru/the-amazon-q-vs-code-prompt-injection-explained-impact-and-learnings-for-devops-3a9d2f752dea
- 2026-01-30 NVD: CVE detailing the Amazon Q Developer VS Code Extension Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-8217
- 2026-01-30 404 Media: 404 Media report on the Amazon Q VS Code extension incident https://404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.