Miasma/MYRA npm Infostealer Reading Shell History Files via node.exe

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects Node.js processes accessing common shell history files or PowerShell history logs. This behavior is indicative of infostealer malware, such as those targeting developers, attempting to extract credentials or command history from the local filesystem.