The wiping commands probably wouldn't have worked, but a hacker who says they wanted to expose Amazon’s AI “security theater” was able to add code to Amazon’s popular ‘Q’ AI assistant for VS Code, which Amazon then pushed out to users.
  • SheeEttin@lemmy.zip
    3·
    4 days ago

    So it was due to a misconfiguration in their GitHub project, that inappropriately accepted a PR? Or because a random account was added to the project?

    I don’t see it in the commit history either. There’s one merge on the 13th, and it was immediately reverted. Have they modified the history?