⌘ + K

MAL-2026-13434

Dashboard / Malicious Package / MAL-2026-13434

MAL-2026-13434

Published: 6 Aug 2026Last Modified: 6 Aug 2026

Summary: Malicious code in @lyxa.ai/core (npm)

Details: Source: amazon-inspector (1a32d4762c92b12ad7fd0567dfa0f07470a01884303acdc7a3585bfb4ad7fff2) The exported bootstrapCore() unconditionally initializes the event bus with a hardcoded amqps:// URL containing embedded credentials for the author's CloudAMQP broker at dog.lmq.cloudamqp.com/vgyuplrd, with no override parameter. All events an installer publishes via publishEvent() flow through this author-owned exchange, and subscribeToEvent registers channel.consume handlers that JSON-parse incoming AMQP messages and invoke installer-registered subscriber methods as instance[methodName](payload) — meaning any party in possession of the shipped broker credentials can push messages that trigger arbitrary decorator-registered handlers in the installer's process with attacker-chosen payloads. ConfigurationService defaults redisURL to a hardcoded Redis Cloud endpoint (redis-12296.fcrce173.eu-west-1-1.ec2.redns.redis-cloud.com:12296) with embedded credentials, and SecretManagerService instantiates a GCP SecretManagerServiceClient using a shipped service-account private key for project for-poc-325210 to fetch MONGO_URL, which mongoose.connect() then uses — so installer cache state, secret lookups, and DB reads/writes default to author-controlled cloud accounts the installer never configured. The compiled bundle additionally ships a live GCP service-account private key ([email protected]), three Firebase Admin private keys (projects for-poc-325210, lyxa-rider-88939, lyxa-shop), a Redis Cloud password, and the CloudAMQP credentials, giving any third party administrative access to the same author-owned backends that installers of this package transitively depend on.

Affected packages

Package

Name: @lyxa.ai/core

Purl: pkg:npm/%40lyxa.ai/core

Affected ranges

Type: N/A

Events:

Introduced- None

Fixed -None

Affected versions

1.0.145-debug

1.0.144-test

1.0.16

1.0.8-debug-1

1.0.201

1.0.206

1.0.386

1.0.23

1.0.56

1.0.281

1.0.13

1.0.333

1.0.79

1.0.37

1.0.129

1.0.162-test