Miasma/MYRA: Node.js Bulk SSH Key Exfil with External Network Connection

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•2

Detects Node.js or npm processes that access multiple SSH-related files within a short timeframe while also establishing external network connections, which is consistent with credential exfiltration patterns.