Jul 17, 2025Confirmed
Alleged Malicious Wiping Command Found in Amazon Q AI Assistant
Rogue: Caused harmAI loose in the worldInjectionDERIVED
Approved by person, Oct 11, 2026. How entries are approved
A reported compromise of Amazon's AI coding assistant "Q" allegedly involved the insertion of commands that, if executed, could have wiped local files and potentially affected cloud resources. The altered code was reportedly incorporated into a public release before being detected and removed.
What this means for youAt home, if you use AI coding or assistant tools, keep them updated from official sources and check that extensions come from the publisher you expect. At work, teams that install AI tools should review updates before rolling them out. In government, agencies buying AI tools should require supply-chain checks on vendor releases.
Sources
- AI Incident Databasehttps://incidentdatabase.ai/cite/1158
Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.
Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.
rogue:R4
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2050. It has not been edited since it was approved; the hash above would not match if it had. How to verify