Reference implementation Data compiled from public sources as of 2026-10-26. Not an assessment, certification or recommendation. Confirm current status with the vendor and the issuing body.
AgentDossier · AI Agent Registry Find agents you can actually trust - public or inside your enterprise.

Traces / TR-2026-006

agent was the target · real-world incident · unreviewed

A malicious prompt is injected into the Amazon Q Developer VS Code extension release

A pull request from an unverified account added a system prompt instructing the agent to wipe the user's file system and cloud resources, and the release shipped with it. AWS pulled v1.84.0 and released a fix; it later said the instruction was malformed and would not have executed.

Export STIX 2.1 Export JSON Request a correction (GitHub issue)

Timeline

2025-07-23 BleepingComputer reports a wiper prompt was merged into and shipped with the Amazon Q VS Code extension (v1.84.0); AWS pulls the version and releases a fix · BleepingComputer T2

What defenders can take from it

  1. An agent's system prompt is executable supply chain — review contributed prompt and tool changes like code.
  2. A no-confirmed-impact outcome here was luck (a malformed payload), not a control; assume a well-formed one next time.

The maintainer's reading of the public reports, not advice specific to your deployment.

Sources · 1

Links re-checked 2026-10-26 by the weekly refresh. A link that moved or stopped answering is flagged above; it is not a change to the record.

Compiled from the public sources above, as reported. Not an attribution, a finding of fault or a legal conclusion; figures are those stated by the sources. One event, as of its sources' dates.