Malicious MCP Config in Cloned Repository - Amazon Q DPRK Job Lure

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•6

Detects the creation of .amazonq/mcp.json or mcp.json files within repository directories following a git clone operation. This behavior is associated with the exploitation of vulnerabilities (such as CVE-2026-12957) where attackers use malicious job-interview repositories to trigger automatic execution of arbitrary MCP (Model Context Protocol) servers in the Amazon Q Developer extension in VS Code, potentially leading to unauthorized credential or sensitive data access.