One pull to wipe them all

The New Stack · 1 month ago · 12

A malicious pull request was submitted to Amazon’s aws-toolkit-vscode repo and later shipped via the Q Developer VS Code extension to nearly 1 million developers. The attacker’s update was built to run an AI prompt that could wipe systems and delete local and cloud resources, but a formatting error prevented execution in customer environments. Amazon revoked the overreaching GitHub token, removed the code, rebuilt clean within two days, and required human-in-the-loop confirmation with external policy gates to stop injected or altered instructions before actions execute.