
Someone managed to sneak a malicious prompt into Amazon's coding assistant, Q, that was supposed to convince the "artificial intelligence" that it should use its access to the command line to attempt to delete files and folders on the user's system.
404 Media reports that version 1.84 of the Amazon Q extension for VS Code contained a malicious prompt that was introduced via a pull request to the utility's GitHub repository on July 13. AWS has since removed the offending version of the extension from the VS Code marketplace and silently replaced it with version 1.85.