Miasma/MYRA npm Package System Recon via node.exe Post-Install

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

This rule detects node.js processes executing command-line arguments that attempt to perform system discovery. Specifically, it looks for node.js scripts invoking os-related modules (hostname, platform, cpus) or querying system environment variables (COMPUTERNAME, USERNAME) when the node process is launched by a parent process related to npm or node itself.