{
 "id": "TR-2026-006",
 "status": "published",
 "title": "A malicious prompt is injected into the Amazon Q Developer VS Code extension release",
 "date": "2025-07-23",
 "window": "Shipped in v1.84.0; AWS pulled the release 23 Jul 2025",
 "ai_role": "target",
 "category": "incident",
 "summary": "A pull request from an unverified account added a system prompt instructing the agent to wipe the user's file system and cloud resources, and the release shipped with it. AWS pulled v1.84.0 and released a fix; it later said the instruction was malformed and would not have executed.",
 "attacker": {
  "description": "External contributor via a merged pull request (supply chain)"
 },
 "defender": {
  "description": "AWS — pulled the release and shipped a fix"
 },
 "scale": "Distributed in a shipped extension release; no confirmed destructive runs",
 "impact": "Attempted file-system and cloud-resource destruction embedded in the agent",
 "tactics": [
  "TA0001",
  "TA0040"
 ],
 "timeline": [
  {
   "date": "2025-07-23",
   "text": "BleepingComputer reports a wiper prompt was merged into and shipped with the Amazon Q VS Code extension (v1.84.0); AWS pulls the version and releases a fix",
   "tier": 2,
   "source": "1"
  }
 ],
 "lessons": [
  "An agent's system prompt is executable supply chain — review contributed prompt and tool changes like code.",
  "A no-confirmed-impact outcome here was luck (a malformed payload), not a control; assume a well-formed one next time."
 ],
 "models_named": [],
 "related_agents": [
  "aws-amazon-q-developer"
 ],
 "vendor_response": "Version 1.84.0 removed; AWS security bulletin",
 "sources": [
  {
   "title": "Amazon AI coding agent hacked to inject data-wiping commands",
   "url": "https://bleepingcomputer.com/news/security/amazon-ai-coding-agent-hacked-to-inject-data-wiping-commands",
   "outlet": "BleepingComputer",
   "date": "2025-07-23"
  }
 ],
 "reviewer": null,
 "checked_on": null
}