momentic@3.58.0
 [![npm]](https://www.npmjs.com/package/momentic)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo automatic lifecycle execution or confirmed credential theft was found. The explicit agent-configuration capability and incomplete coverage of the compiled artifact justify a warning rather than a clean or blocking verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs momentic install-mcp.
Impact
It can alter selected agent configuration and optionally place a Momentic API key in that configuration.
Mechanism
User-invoked coding-agent configuration setup.
AI rationale
No automatic lifecycle execution or confirmed credential theft was found. The explicit agent-configuration capability and incomplete coverage of the compiled artifact justify a warning rather than a clean or blocking verdict.
Evidence
bin/cli.js~/.momentic/auth.json
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Suspicious at 76.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI exposes an explicit install-mcp command that configures coding-agent settings.
- The flagged test bundle is a large compiled browser artifact, limiting complete source-level verification.
Evidence against
- package.json has no lifecycle scripts.
- The agent configuration action is an explicit CLI command, not install-time execution.
- Observed service endpoint is the package-aligned Momentic API.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
18 flaggedpackage.jsonView file
•name = momentic; similarTo = moment
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgstatic/assets/index-C6VRmUxW.jsView file
12patternName = generic_password
severity = medium
line = 12
Medium
Secret Pattern
Package contains a possible secret pattern.
static/assets/index-C6VRmUxW.jsView on unpkg · L12bin/cli.jsView file
13import V6 from 'truncate-json';
L14: import Jl, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L15: import tBe from 'safe-stable-stringify';
...
L30: import PU, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as Tmt from 'child_process';
L32: import { execFile, execSync, exec, spawnSync, execFileSync, spawn as spawn$1 } from 'child_process';
...
L37: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L38: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L39: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L172: Original error: ${o}
L173: `}async function N5({dryRun:e,operation:t}){try{return await t()}catch(o){throw new Error(LNe({err:o,dryRun:e}),{cause:o})}}
Findings
4 Critical12 High5 Medium6 Low
CriticalCredential Exfiltrationbin/cli.js
CriticalBrowser Credential Phishingbin/cli.js
CriticalTrigger Reachable Dangerous Capabilitybin/cli.js
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighRemote Agent Bridgebin/cli.js
HighCross File Remote Execution Contextstatic/assets/test-9AuH7ZAf.js
HighTrigger Reachable Credential Exfiltrationbin/cli.js
Affected versions and remediation
This report applies to momentic@3.58.0.
See all versions of momentic for other recorded verdicts.
- Review the evidence and your use of momentic@3.58.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.