Amazon Q AI Coding Assistant Compromised: Malicious Code Injection Exposes Supply Chain Vulnerabilities
A hacker infiltrated Amazon's AI-powered Q Developer Extension for Visual Studio Code, injecting data-wiping commands into the tool used by nearly one million developers. The breach highlights critical security gaps in AI-assisted coding ecosystems and supply chain safeguards.