aws/aws-toolkit-vscode
View on GitHub ↗ ★ 1,995 TypeScript
Amazon Q, CodeCatalyst, Local Lambda debug, SAM/CFN syntax, ECS Terminal, AWS resources
13 mentions on Hacker News by 11 people: 4 stories, 9 comments · first 2019-07-19 · latest 2025-08-04
20082026
-
▲ 1
Malicious script injected into Amazon Q Developer for VS Codestory by hubraumhugo · 2025-08-04 · 0 comments
-
▲ 1
Malicious script injected into Amazon Q Developer for Visual Studiostory by zX41ZdbW · 2025-07-29 · 1 comment
-
These are the malicious commits in question: https://github.com/aws/aws-toolkit-vscode/commit/678851b https://github.com/aws/aws-toolkit-vscode/commit/1294b38 Which were made using an "inappropriately scoped GitHub token" from build config…
comment by Ukv · 2025-07-29 · in Amazon's AI Coding Revealed a Dirty Little Secret -
…from 404: https://www.404media.co/hacker-plants-computer-wiping-comman... And here's the commit: https://github.com/aws/aws-toolkit-vscode/commit/1294b38b7fa...
comment by muglug · 2025-07-29 · in Amazon's AI Coding Revealed a Dirty Little Secret -
The commit: https://github.com/aws/aws-toolkit-vscode/commit/678851bbe97...
comment by osculum · 2025-07-24 · in Hacker slips malicious 'wiping' command into Amazon's Q AI coding assistant -
…attacker's commit to the now-deleted "stability" branch that includes the offending prompt, it's https://github.com/aws/aws-toolkit-vscode/commit/1294b38b7fa... . (Archive: https://archive.md/s9WnJ )
comment by personalcompute · 2025-07-24 · in AWS merges malicious PR into Amazon Q -
…to be a doppelganger of another commit[2]. Maybe the exact commit message broke the automation? [1] https://github.com/aws/aws-toolkit-vscode/commit/678851bbe97... [2] https://github.com/aws/aws-toolkit-vscode/commit/d1959b99684...
comment by gruez · 2025-07-23 · in AWS merges malicious PR into Amazon Q -
…to uncover the code it downloads though. It downloaded code that was hosted in the same repo, https://github.com/aws/aws-toolkit-vscode/ , just on the "stability" branch. (downloads a file called "scripts/extensionNode.bk") The "stability"…
comment by personalcompute · 2025-07-23 · in AWS merges malicious PR into Amazon Q -
…think it might have been this, which was reverted and seems to have been pushed directly to master: https://github.com/aws/aws-toolkit-vscode/commit/678851bbe97...
comment by shdjhdfh · 2025-07-23 · in AWS merges malicious PR into Amazon Q -
Reverted here: https://github.com/aws/aws-toolkit-vscode/pull/7710
comment by vitaliyf · 2025-07-23 · in Hacker plants computer 'wiping' commands in Amazon's AI coding agent -
https://github.com/aws/aws-toolkit-vscode/issues/7258 more issues
comment by totaldude87 · 2025-05-08 · in AWS Q for VSCode is having issues -
▲ 3
AWS Q for VSCode is having issuesstory by totaldude87 · 2025-05-08 · 1 comment
-
▲ 1
AWS Toolkit for Visual Studio Codestory by T-A · 2019-07-19 · 0 comments