A single config file in a cloned repository could steal your AWS credentials through Amazon Q Developer
A high-severity flaw in Amazon Q Developer allowed a malicious code repository to silently execute commands on a developer’s machine and steal their AWS credentials.