AI Supply Chain - Env Variable Scraping Post-Model Load (T1082)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•4

Detects Python reading the .env file or executing env commands to scrape Hugging Face tokens or AWS keys after loading a model.