momentic@3.58.6
 [![npm]](https://www.npmjs.com/package/momentic)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe scanner's credential-phishing and automatic-persistence claims were not confirmed by source inspection. The remaining concrete risk is explicit agent configuration mutation, which warrants a warning under policy.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the CLI MCP setup flow or selects MCP setup interactively.
Impact
A configured agent can start the Momentic MCP server and may receive a Momentic API key when the user explicitly requests inclusion.
Mechanism
Writes coding-agent MCP configuration for the Momentic CLI.
AI rationale
The scanner's credential-phishing and automatic-persistence claims were not confirmed by source inspection. The remaining concrete risk is explicit agent configuration mutation, which warrants a warning under policy.
Evidence
package.jsonbin/cli.js
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes an executable CLI.
- The CLI contains user-invoked MCP setup that can modify supported coding-agent configuration files and optionally supply the Momentic API key.
Evidence against
- package.json has no install lifecycle script.
- The configuration change is reached through an explicit CLI setup action and targets the package's own MCP server.
- Observed service endpoints are Momentic-owned; no credential harvesting or unrelated exfiltration was confirmed.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
18 flaggedpackage.jsonView file
•name = momentic; similarTo = moment
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgstatic/assets/index-B9He0E_t.jsView file
12patternName = generic_password
severity = medium
line = 12
Medium
Secret Pattern
Package contains a possible secret pattern.
static/assets/index-B9He0E_t.jsView on unpkg · L12bin/cli.jsView file
13import X6 from 'truncate-json';
L14: import Yl, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L15: import cBe from 'safe-stable-stringify';
...
L30: import NU, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L31: import * as Lmt from 'child_process';
L32: import { execFile, execSync, exec, spawnSync, execFileSync, spawn as spawn$1 } from 'child_process';
...
L37: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L38: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L39: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L172: Original error: ${o}
L173: `}async function j5({dryRun:e,operation:t}){try{return await t()}catch(o){throw new Error(HNe({err:o,dryRun:e}),{cause:o})}}
Findings
4 Critical12 High5 Medium6 Low
CriticalCredential Exfiltrationbin/cli.js
CriticalBrowser Credential Phishingbin/cli.js
CriticalTrigger Reachable Dangerous Capabilitybin/cli.js
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighRemote Agent Bridgebin/cli.js
HighCross File Remote Execution Contextstatic/assets/test-Bgr7YcO1.js
HighTrigger Reachable Credential Exfiltrationbin/cli.js
Affected versions and remediation
This report applies to momentic@3.58.6.
See all versions of momentic for other recorded verdicts.
- Review the evidence and your use of momentic@3.58.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.