Amazon Q Developer VS Code extension shipped with injected malicious code
A threat actor used an over-scoped GitHub token in AWS's CodeBuild setup to commit malicious code to the open-source Amazon Q Developer extension. The code was included in version 1.84.0, released on July 17, 2025, and reached users. AWS says a syntax error stopped it from running, so no services or customer environments were changed. AWS revoked the credentials, pulled 1.84.0 and shipped 1.85.0.
Sources
- Primary: https://aws.amazon.com/security/security-bulletins/AWS-2025-015/
- Upstream: Editorial
- Entered by the cybermap.lol editors, with sources on the entry
Defenses for this class of incident
all categoriesA supply chain sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.