Amazon AI coding agent hacked to inject data wiping commands

**Amazon Q VS Code extension compromised via malicious commit** — A contributor account submitted an unapproved commit that introduced a data-wiping prompt into the Amazon Q Developer Extension (v1.84.0) published to the VS Code marketplace; AWS removed the code, revoked credentials, and released v1.85.0 after security reports, with AWS stating no customer resources were impacted though some researchers indicate the code may have executed without causing harm.