The @lyxa.ai/core npm package contains malicious code that embeds hardcoded credentials for cloud services controlled by the package author. These include AMQP broker credentials, Redis Cloud credentials, and GCP service account private keys. This allows any party with access to these credentials to send arbitrary messages that trigger code execution in the installer's environment and gain administrative access to cloud resources used by the package.