{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/amazon-q-vscode-malicious-prompt-release-2025/",
 "asOf": "2026-09-26",
 "id": "amazon-q-vscode-malicious-prompt-release-2025",
 "date": "2025-07-23",
 "datePrecision": "day",
 "title": "Malicious agent instruction merged into Amazon Q Developer VS Code extension release 1.84.0",
 "lane": "attack",
 "kind": "incident",
 "summary": "An actor used an improperly scoped GitHub token in AWS's build configuration to insert code into the Amazon Q Developer extension that instructed the agent to wipe local and cloud resources, and it shipped in version 1.84.0 on 2025-07-17. AWS says the code failed to execute due to a syntax error, no customer resources were affected, and it released 1.85.0 and assigned CVE-2025-8217.",
 "whyItMatters": "It showed that an agent's own instructions can be poisoned through the software supply chain and pushed to a large install base.",
 "actors": [
  "amazon-web-services"
 ],
 "topics": [
  "agent-supply-chain",
  "prompt-injection"
 ],
 "atlas": [
  "supply-chain",
  "credentials",
  "tools"
 ],
 "artifacts": [],
 "sources": [
  {
   "url": "https://aws.amazon.com/security/security-bulletins/AWS-2025-015/",
   "publisher": "Amazon Web Services",
   "title": "Security Update for Amazon Q Developer Extension for Visual Studio Code (Version #1.84)",
   "date": "2025-07-23",
   "type": "primary",
   "accessed": "2026-09-25"
  },
  {
   "url": "https://www.bleepingcomputer.com/news/security/amazon-ai-coding-agent-hacked-to-inject-data-wiping-commands/",
   "publisher": "BleepingComputer",
   "title": "Amazon AI coding agent hacked to inject data wiping commands",
   "date": "2025-07-25",
   "type": "secondary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "Affected version 1.84.0; fixed in 1.85.0; 1.84.0 removed from distribution.",
   "locator": "AWS bulletin"
  },
  {
   "fact": "BleepingComputer reports the extension had nearly one million installs on the VS Code marketplace.",
   "locator": "BleepingComputer article body"
  }
 ],
 "significance": 4,
 "fideQuestions": [],
 "methods": [],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}