registry / @momentic/qa-node / 0.27.0
@momentic/qa-node@0.27.0
A Node.js build of qa for Windows Server 2016, which Bun does not support.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe manifest has no install hooks, and the inspected entrypoint behavior is consistent with a CLI communicating with its own service and providing an invoked connector feature. Scanner flags do not establish malicious behavior in the inspected source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Runtime telemetry is triggered by CLI logging; connector hosting is activated through the tunnel command.
Impact
The inspected behavior supports product logging and requested connector hosting; no malicious credential transfer or remote code execution was established.
Mechanism
The logger batches log records to Momentic’s metrics host. Connector setup uses an embedded runtime and user-specified tunnel addresses.
AI rationale
The manifest has no install hooks, and the inspected entrypoint behavior is consistent with a CLI communicating with its own service and providing an invoked connector feature. Scanner flags do not establish malicious behavior in the inspected source.
Evidence
package.jsonmo.mjs
Network endpoints2
us-west.metrics.momentic.aiapi.momentic.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and lists no install lifecycle scripts.
- The API client uses a configurable server, defaults to Momentic’s API, and sends its API key as a bearer token.
- The CLI logger sends runtime log records to Momentic’s metrics host; the source identifies the app and host fields.
- Connector setup uses an embedded runtime and validates requested tunnel addresses; the CLI exposes tunnel start as a command.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Oversized source lightweight scan
Source & flagged code
12 flaggedmo.mjsView file
35import gye from 'node:tty';
L36: import { execSync, spawnSync, spawn as spawn$1 } from 'child_process';
L37: import { randomUUID, generateKeyPairSync, privateDecrypt, constants, createHash } from 'node:crypto';
...
L41: import lQe, { mkdtemp, writeFile, rm as rm$1, open, readFile as readFile$1, stat, readdir as readdir$1, link, mkdir, chmod, constants as constants$1, rename } from 'node:fs/promise...
L42: import { validateHeaderValue } from 'http';
L43: import { pipeline } from 'node:stream/promises';
...
L46: const require$1 = createRequire(import.meta.url);
L47: var sVe=Object.create;var Z2=Object.defineProperty;var aVe=Object.getOwnPropertyDescriptor;var cVe=Object.getOwnPropertyNames;var lVe=Object.getPrototypeOf,uVe=Object.prototype.has...
L48: `).join(`
Critical
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
mo.mjsView on unpkg · L359import { EventEmitter as EventEmitter$1, errorMonitor } from 'node:events';
L10: import * as h8 from 'node:http';
L11: import { createServer } from 'node:http';
...
L14: import { AsyncLocalStorage, AsyncResource } from 'node:async_hooks';
L15: import EQe, { execFile, spawn } from 'node:child_process';
L16: import Un, { readFile, readdir, openAsBlob, writeFileSync, renameSync, rmSync, realpathSync, openSync, fchmodSync, closeSync, createReadStream, existsSync, readFileSync as readFile...
...
L26: import { Readable } from 'node:stream';
L27: import { gunzipSync, createGzip } from 'node:zlib';
L28: import * as qc from 'node:net';
...
L36: import { execSync, spawnSync, spawn as spawn$1 } from 'child_process';
L37: import { randomUUID, generateKeyPairSync, privateDecrypt, constants, createH
Findings
4 Critical6 High5 Medium4 Low
CriticalSame File Env Network Executionmo.mjs
CriticalDownload Executemo.mjs
CriticalRemote Asset Decode Executemo.mjs
CriticalTrigger Reachable Dangerous Capabilitymo.mjs
HighChild Processmo.mjs
HighShellmo.mjs
HighCredential Redirect Persistencemo.mjs
HighCommand Output Exfiltrationmo.mjs
HighTrigger Reachable Command Output Exfiltrationmo.mjs
HighSemantic Analysis Limitedmo.mjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filemo.mjs
Affected versions and remediation
This report applies to @momentic/qa-node@0.27.0.
See all versions of @momentic/qa-node for other recorded verdicts.
- Review the evidence and your use of @momentic/qa-node@0.27.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.