momentic@3.9.1
 [![npm]](https://www.npmjs.com/package/momentic)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiStatic hints arise from a bundled E2E-testing CLI with intentional network, browser, subprocess, and package-install features. Source inspection found no malicious chain or lifecycle-triggered behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs momentic CLI subcommands.
Impact
No unconsented install-time execution, credential harvesting, exfiltration, persistence, or broad agent-control mutation found.
Mechanism
User-directed E2E testing, browser automation, and Momentic API access.
AI rationale
Static hints arise from a bundled E2E-testing CLI with intentional network, browser, subprocess, and package-install features. Source inspection found no malicious chain or lifecycle-triggered behavior.
Evidence
package.jsonbin/cli.jsREADME.mdskills/momentic-test.md
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json exposes only the user-invoked momentic CLI; it has no lifecycle scripts.
- bin/cli.js defaults API traffic to https://api.momentic.ai and obtains its documented MOMENTIC_API_KEY.
- Browser installation, upgrades, daemon startup, and test mutations are explicit CLI command paths.
- Telemetry endpoints are Momentic/Sentry services; no source evidence sends harvested browser credentials or arbitrary environment data.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
NoLicense
Source & flagged code
13 flaggedpackage.jsonView file
•name = momentic; similarTo = moment
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgbin/cli.jsView file
29import oO, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L30: import * as nke from 'child_process';
L31: import { execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L36: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L37: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L38: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L159: Use this only after the available tools cannot establish a defensible root cause. Do not use OTHER while targeted current-run step results, container screenshots, or required past-...
L160: `,action:"fail"}],uO="warn",pO="pull-request";var GE=O__default.object({onFail:O__default.nativeEnum(cS).default(uO),onSuccess:O__default.nativeE
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
bin/cli.jsView on unpkg · L29Findings
3 Critical8 High4 Medium7 Low
CriticalCredential Exfiltrationbin/cli.js
CriticalBrowser Credential Phishingbin/cli.js
CriticalTrigger Reachable Dangerous Capabilitybin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-ZXqqHaV7.js
HighSame File Env Network Executionbin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighRemote Agent Bridgebin/cli.js
HighTrigger Reachable Credential Exfiltrationbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighRuntime Package Installbin/cli.js
MediumTyposquat Namepackage.json
Affected versions and remediation
This report applies to momentic@3.9.1.
See all versions of momentic for other recorded verdicts.
- Review the evidence and your use of momentic@3.9.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.