Miasma/MYRA npm Infostealer Accessing AWS Credentials on Developer Workstations
Detects instances where node.exe processes attempt to access sensitive configuration files, specifically AWS credential or configuration files, or .env files associated with common package installation or session management operations. This behavior may indicate an attempt to exfiltrate credentials from a developer or build environment.
Microsoft Sentinel (KQL)
