{
  "id": 2803055,
  "title": "One pull to wipe them all",
  "url": "https://urgent.news/2026/08/23/one-pull-to-wipe-them-all",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-23T14:00:00.000Z",
  "source": {
    "name": "The New Stack",
    "slug": "the-new-stack",
    "url": "https://thenewstack.io/ai-coding-agent-security/"
  },
  "original_language": "en",
  "account": "On July 13, 2025, a pull request was submitted to Amazon's open-source AWS Toolkit extension for Visual Studio Code. This seemingly innocuous update introduced new prompts into the extension's packaging script, instructing an AI coding assistant to perform destructive actions on a user's system. Despite the unremarkable nature of the update, it triggered a response from Amazon's security team, who confirmed that the malicious code never executed in a customer environment due to a formatting error in the pull request. The hacker behind the attack claimed it was a deliberate stunt to highlight security vulnerabilities and the potential of AI replacing human workers. While the attempt did not succeed, the incident raised concerns about the inherent trust placed in AI coding assistants and the potential risks associated with their unfiltered execution of commands. The story highlights the need for additional safeguards and human oversight in the deployment of AI-powered tools to prevent potential misuse and unintended consequences.",
  "summary": "Q Developer is a free extension that lets a coding agent read a project, propose changes, and run commands on The post One pull to wipe them all appeared first on The New Stack .",
  "key_points": [
    "Pull request introduced AI coding assistant prompts to AWS Toolkit extension.",
    "Amazon security team confirmed malicious code never executed in customer environments.",
    "Hacker claimed stunt to highlight security vulnerabilities and AI replacing workers."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}