2025-07-17 · 2025-Q3
Amazon Q VS Code Extension Compromise
Should this run hold this key at all?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Attacker
Target
Amazon Q Developer Extension (950K+ installs)
Impact
Compromised v1.84.0 live for two days; destructive AI prompt instructed deletion of home directory and AWS resources; failed due to syntax error
Root cause
Over-scoped GitHub token in CI/CD pipeline
Sources
Catalog
Cite this: AgentProv incident record: Amazon Q VS Code Extension Compromise (2025-07-17). https://agentprov.com/incidents/2025-07-17-amazon-q-vs-code-extension-compromise
Related
- Also L1 · 2026-10-21LiteLLM 1.107.0 on PyPI and Docker Ships a Credential Stealer That Runs at Every Python StartupL1Credential
- Also L1 · 2026-10-17OpenCode Console Breach Exposes Users' Stored OpenAI, Anthropic, and Google API KeysL1Credential
- Also L1 · 2026-10-13IBM MCP Context Forge Shipped a Known JWT Secret, Letting Anyone Mint Platform Admin Tokens (CVE-2026-53709)L1Credential