Miasma/MYRA Infostealer Harvesting Claude Code Credentials via collectClaude

Ibrahim Saud@tektrix

•updated Jun 30, 2026•1•0•7

Detects Node.js processes attempting to access sensitive files or environment variables associated with Claude AI (e.g., Anthropic API keys, .claude configuration files), which may indicate credential harvesting activity by malicious code.