Amazon Q Developer
AssessTools
An AI coding assistant extension that can read projects, propose code changes, and run commands in an editor.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 0 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 8The New Stack·8/23/2026securityMalformed prompt in Amazon Q Developer update nearly enabled a destructive wipe
A malicious pull request to Amazon’s aws-toolkit-vscode repository injected a prompt that would have instructed Q Developer to wipe systems and cloud resources, but a formatting error prevented execution. The incident highlights how AI coding agents can be abused through supply-chain style attacks and why human approval gates remain important.