momentic@3.16.3
 [![npm]](https://www.npmjs.com/package/momentic)
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
NoLicense
Oversized source lightweight scan
bin/cli.js2.82 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellWebSocketObfuscatedHighEntropyStringsMinifiedTelemetryUrlStringsapi.momentic.aigithub.comwww.google.comwww.mydevice.io
Source & flagged code
3 flaggedpackage.jsonView file
•name = momentic; similarTo = moment
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgbin/cli.jsView file
•path = bin/cli.js
kind = oversized_source_file
sizeBytes = 2957335
magicHex = [redacted]
High
Oversized Source File
Package contains source files above the static scanner size ceiling.
bin/cli.jsView on unpkg•path = bin/cli.js
kind = oversized_cli_entrypoint
sizeBytes = 2957335
magicHex = [redacted]
Medium
Oversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
bin/cli.jsView on unpkgFindings
1 High5 Medium6 Low
HighOversized Source Filebin/cli.js
MediumTyposquat Namepackage.json
MediumNetwork
MediumEnvironment Vars
MediumOversized Cli Entrypointbin/cli.js
MediumStructural Risk Force Deep Review
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to momentic@3.16.3.
See all versions of momentic for other recorded verdicts.
- Review the evidence and your use of momentic@3.16.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.