Miasma Phantom Gyp: node-gyp Spawning node index.js at npm Install Time
Detects the execution of Node.js build processes (node-gyp) or npm build commands involving native module compilation. These patterns are often indicative of legitimate development workflows but are also leveraged by attackers to compile malicious native add-ons or execute arbitrary code in a build environment.
Cortex XDR
