momentic@3.52.3
 [![npm]](https://www.npmjs.com/package/momentic)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiDirect inspection found a bundled Momentic CLI with user-triggered API-key and telemetry functionality, but no lifecycle hook or concrete malicious chain. The scanner's credential and browser-harvesting claims are not supported by the inspected source.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs a Momentic CLI command that requires authentication or explicitly enables diagnostics.
Impact
No unconsented credential collection, persistence, or foreign control-surface mutation was confirmed.
Mechanism
Authenticated API requests and optional diagnostics for the Momentic testing service.
AI rationale
Direct inspection found a bundled Momentic CLI with user-triggered API-key and telemetry functionality, but no lifecycle hook or concrete malicious chain. The scanner's credential and browser-harvesting claims are not supported by the inspected source.
Evidence
package.jsonbin/cli.js
Network endpoints3
api.momentic.aip.momentic.aius-west.metrics.momentic.ai
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a user-invoked CLI entry point.
- The CLI obtains a Momentic API key from an option, environment variable, or its own auth file and uses the Momentic API endpoint.
- The CLI declares an explicit option before sharing local diagnostics.
Evidence against
- The manifest has no preinstall, install, postinstall, or other lifecycle scripts.
- No source evidence shows browser credential harvesting, foreign package overwrites, or an unofficial credential gateway.
- The credential and network behavior is aligned with the package's test-platform CLI functions and configurable server option.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
17 flaggedpackage.jsonView file
•name = momentic; similarTo = moment
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgbin/cli.jsView file
11import V4 from 'truncate-json';
L12: import Bl, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L13: import bNe from 'safe-stable-stringify';
...
L30: import u0, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as iat from 'child_process';
L32: import { execFile, execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L37: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L38: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L39: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L170: Original error: ${n}
L171: `}async function L3({dryRun:e,operation:t}){try{return await t()}catch(n){throw new Error(rMe({err:n,dryRun:e}),{cause:n})}}function Xr
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
bin/cli.jsView on unpkg · L11Findings
4 Critical11 High4 Medium6 Low
CriticalCredential Exfiltrationbin/cli.js
CriticalBrowser Credential Phishingbin/cli.js
CriticalTrigger Reachable Dangerous Capabilitybin/cli.js
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-CbXX6Mi5.js
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighEntrypoint Foreign Package Code Overwritebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighRemote Agent Bridgebin/cli.js
HighTrigger Reachable Credential Exfiltration
Affected versions and remediation
This report applies to momentic@3.52.3.
See all versions of momentic for other recorded verdicts.
- Review the evidence and your use of momentic@3.52.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.