Amazon's AI Coding Tool Q Faces Security Threat, Removed by Developer

Amazon's AI coding tool, Q, faced a security scare when a malicious prompt was discovered in its Visual Studio Code extension. The prompt attempted to delete files and folders on users' systems, but the issue was quickly removed and no customer resources were affected. AWS emphasized that security is a top priority and users are advised to update to version 1.85 as a precaution.

Alibaba has introduced Qwen3-Coder, its most advanced open-source AI coding model, designed to support complex software development tasks. The model, released on July 24, 2025, leverages a large-scale Mixture-of-Experts (MoE) architecture and is available as open-source software. Qwen3-Coder aims to improve code writing, management, and debugging, making software engineering more efficient and accessible [1].

The full model, named Qwen3-Coder-480B-A35B-Instruct, consists of 480 billion parameters but activates only 35 billion per token, allowing for high performance with greater efficiency. Trained on a vast collection of code and general text data, it natively supports a 256,000-token context window, extendable to 1 million tokens, enabling it to process massive codebases in a single run. The model introduces several technical advances, including token scaling, long-context optimization, and synthetic data use. Post-training enhancements such as long-horizon reinforcement learning allow the model to handle multi-step problem-solving through interaction with external tools [1].

To support real-world use, Alibaba is also releasing Qwen Code, a command-line interface (CLI) that allows developers to assign engineering tasks to the model using natural language. The model is compatible with external interfaces, including the Claude Code interface, offering developers greater flexibility in integrating Qwen3-Coder into their workflows [1].

Qwen3-Coder is now available on Hugging Face and GitHub, and can also be accessed through Alibaba’s Qwen Chat platform or via cost-effective APIs offered through Model Studio. Since launching in June 2024, Alibaba Cloud’s AI coding assistant, Tongyi Lingma, has been used to generate more than 3 billion lines of code, supporting tasks such as code completion, optimization, debugging, snippet search, and automated unit test generation [1].

Alibaba’s push into the AI-for-developers space reflects ongoing shifts towards more intelligent and autonomous coding solutions. The company’s commitment to security and user safety is evident, as seen with the quick removal of a malicious prompt discovered in its Visual Studio Code extension. AWS emphasized that security is a top priority and advised users to update to version 1.85 as a precaution [2].

References:
[1] https://www.techedt.com/alibaba-launches-qwen3-coder-its-most-advanced-open-source-ai-coding-model
[2] https://www.techedt.com/amazon-ai-coding-tool-q-faces-security-scare