aws-toolkit-vscode
AssessTools
Amazon’s Visual Studio Code extension toolkit for AWS development workflows.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 0 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 8The New Stack·8/23/2026securityMalformed prompt in Amazon Q Developer update nearly enabled a destructive wipe
A malicious pull request to Amazon’s aws-toolkit-vscode repository injected a prompt that would have instructed Q Developer to wipe systems and cloud resources, but a formatting error prevented execution. The incident highlights how AI coding agents can be abused through supply-chain style attacks and why human approval gates remain important.