Nearly 1 Million Users Affected by Amazon’s Code Tool Breach

Amazon’s AI-powered Q Developer Extension for Visual Studio Code suffered a major breach after a hacker injected rogue code into its GitHub repository. Nearly 1 million users downloaded the compromised version (1.84.0), which contained commands instructing systems to wipe cloud and file resources.Although the code wasn’t functional, it exposed major flaws in Amazon’s security pipeline. AWS responded swiftly with a clean version (1.85.0) and revoked compromised credentials. The incident is a chilling reminder of rising supply chain threats in AI-based dev tools.📌 Key Highlights:Malicious code inserted in Amazon Q Developer ExtensionAffected version 1.84.0 downloaded nearly 1 million timesCode instructed deletion of system and cloud resourcesAWS released clean update 1.85.0 and secured credentialsRaises alarm over AI-integrated software supply chain threats#AmazonCodeBreach #SupplyChainAttack #QDeveloperExtension #CyberSecurityNews #AItoolSecurity #VisualStudioCode #CyberPlatter