Hacker inserts destructive code in Amazon Q tool as update goes live