Withdrawn record · PI-0018
Malicious prompt planted in Amazon Q Developer VS Code extension shipped to users
This record was withdrawn on Oct. 3, 2026. Reason: out of scope.
Formerly PI-0018, withdrawn 3 Oct 2026 (incident audit). An attacker planted the prompt through an over-scoped build token; AWS says it never ran (syntax error) and no customer environment was affected. No output or action by the model itself, so out of scope under section 0. The ID is retired, not reused.
The ID is retired and will not be reused. This withdrawn record does not count toward current readings.