Malformed prompt in Amazon Q Developer update nearly enabled a destructive wipe

AI summary

A malicious pull request to Amazon’s aws-toolkit-vscode repository injected a prompt that would have instructed Q Developer to wipe systems and cloud resources, but a formatting error prevented execution. The incident highlights how AI coding agents can be abused through supply-chain style attacks and why human approval gates remain important.