Amazon Q extension prompt injection

Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.

Mapped techniques

T0154 Malicious IDE extension
T0210 Poison AI coding-agent config or workspace

supply-chain campaign

T0154 · Initial Access · Malicious IDE extension

IDE/browser extension as the delivery.

T0210 · Persistence · Poison AI coding-agent config or workspace

Prompt injection in the AI tool.

Sources

https://aws.amazon.com/security/security-bulletins/AWS-2025-015/
https://github.com/aws/aws-toolkit-vscode/security/advisories/GHSA-7g7f-ff96-5gcw
https://www.reversinglabs.com/blog/aws-amazonq-ai-incident
https://github.com/vectara/awesome-agent-failures/blob/main/docs/case-studies/amazon-q-supply-chain-attack.md