VibeAmazon Q Developer VS Code extension 1.84.0 shipped with an injected 'wipe' prompt
Incident dateJul 2025 (v1.84.0 release; exact date not stated in our sources)
DisclosedJul 23, 2025 (AWS bulletin AWS-2025-015)
Added hereOct 13, 11:49 PM ET
Last verifiedOct 14, 2026
Summary
Version 1.84.0 of the Amazon Q Developer extension for VS Code contained an injected prompt telling the agent to delete local files and AWS resources. AWS says a syntax error stopped it from running and no customer environments were affected. Version 1.85.0 removed it.
Severity
MEDIUM A supply-chain compromise of a widely used AI coding extension. Rated Medium here because AWS reports the code never executed successfully.
Timeline
v1.84.0 released containing the injected prompt.
AWS publishes bulletin AWS-2025-015 (updated Jul 25); v1.85.0 is the fixed version.
GitHub advisory GHSA-7g7f-ff96-5gcw published.
NVD publishes CVE-2025-8217.
How it happened
Unauthorized code made it into a released build of the extension. AWS says its investigation found an inappropriately scoped GitHub token in the extension's CodeBuild configuration. Because AI agents act on prompts, a few lines of text were enough to describe a destructive task.
How to check your app
- Make sure no copy of Amazon Q for VS Code 1.84.0 is installed, including in forked editors.
- Pin and review AI extensions in team environments rather than auto-updating everything.
- Give coding agents scoped cloud credentials, not admin keys.
Sources
Corrections and updates
Dated the timeline from the AWS bulletin, GitHub advisory and NVD record, and added AWS's finding about an inappropriately scoped GitHub token.
If you want a quick way to check the basics above on your own app, LockedVibe publishes a free Lockdown Pack with the prompts and checks for RLS, auth and exposed keys.