On Linuxy platforms, you can log and analyze native allocations with GCC's mtrace, which I've exposed to node here:
https://github.com/Jimbly/node-mtrace
Unfortunately, with any C++ allocations (which includes Buffers), they're all attributed to a single call site, "operator::new", so your mileage may vary. If it's a rogue addon which is doing it's own memory allocations, it may help, or you may get lucky and something will jump out at you as suspicious.