Malicious pull request targets Amazon's Q Developer coding agent
On July 13, 2025, a GitHub user submitted a pull request to Amazon's aws-toolkit-vscode repository that would have made the Q Developer coding agent run malicious commands. The attack was blocked before merging.
1 source
Daily brief
Get tomorrow's AI brief in your inbox
More stories today
- ACE Robotics chairman predicts embodied AI 'ChatGPT moment' by 2027
- Robot plays ping pong with Olympic champion Ding Ning
- Minimax H3 local generation hits 20s on 4090
- Claude prompt turns it into Senior Design Architect
- Users criticize Opus 5 as lazy, sloppy, verbose