As cited
Copy frozen at (site build).
cloud saas
Amazon Q VS Extension Flaw Leads to Cloud Credential Theft
A vulnerability in the Amazon Q Visual Studio Code extension allows adversaries to execute arbitrary code and steal cloud credentials by planting malicious repositories that exploit the flaw. The vulnerability highlights emerging security risks associated with Model Context Protocol (MCP) integration in development tools.
Why it matters: Developers using Amazon Q in VS Code face credential theft and supply chain compromise; teams should audit repository sources and update the extension immediately to prevent unauthorized cloud access.
- Source published
- First seen by Cybersecurity Tracker