momentic@3.9.2
 [![npm]](https://www.npmjs.com/package/momentic)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection shows a bundled official test-automation CLI with explicit commands and no lifecycle hook. Scanner hits stem from its legitimate browser, credential, telemetry, upgrade, and process-management features; no concrete malicious chain was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs the momentic CLI, such as login, test, upgrade, or browser-install commands.
Impact
Can access configured test credentials, local project files, browsers, and commands as required by selected CLI features; no unconsented install-time action was found.
Mechanism
User-invoked test runner with Momentic API and telemetry integration.
AI rationale
Source inspection shows a bundled official test-automation CLI with explicit commands and no lifecycle hook. Scanner hits stem from its legitimate browser, credential, telemetry, upgrade, and process-management features; no concrete malicious chain was found.
Evidence
package.jsonbin/cli.jsREADME.md
Network endpoints2
api.momentic.aius-west.metrics.momentic.ai
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- bin/cli.js bundles browser automation, network clients, and child-process APIs.
- bin/cli.js configures Momentic telemetry and API clients.
Evidence against
- package.json has no preinstall, install, postinstall, or other lifecycle scripts.
- bin/cli.js is only activated by the declared momentic CLI command.
- API key handling is explicit login/configuration for Momentic services.
- Runtime package install is limited to explicit momentic upgrade.
- No source evidence of harvesting arbitrary credentials or exfiltrating them to an unrelated host.
- Browser credentials and process execution support declared test-runner actions.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
Source & flagged code
13 flaggedpackage.jsonView file
•name = momentic; similarTo = moment
Medium
Typosquat Name
Package name is suspiciously similar to a popular package name.
package.jsonView on unpkgbin/cli.jsView file
29import iO, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L30: import * as lke from 'child_process';
L31: import { execSync, exec, execFileSync, spawn as spawn$1 } from 'child_process';
...
L36: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L37: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L38: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L159: Use this only after the available tools cannot establish a defensible root cause. Do not use OTHER while targeted current-run step results, container screenshots, or required past-...
L160: `,action:"fail"}],mO="warn",hO="pull-request";var jE=O__default.object({onFail:O__default.nativeEnum(uS).default(mO),onSuccess:O__default.nativeE
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
bin/cli.jsView on unpkg · L29Findings
3 Critical8 High4 Medium7 Low
CriticalCredential Exfiltrationbin/cli.js
CriticalBrowser Credential Phishingbin/cli.js
CriticalTrigger Reachable Dangerous Capabilitybin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-eTcPupPY.js
HighSame File Env Network Executionbin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighRemote Agent Bridgebin/cli.js
HighTrigger Reachable Credential Exfiltrationbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighRuntime Package Installbin/cli.js
MediumTyposquat Namepackage.json
Affected versions and remediation
This report applies to momentic@3.9.2.
See all versions of momentic for other recorded verdicts.
- Review the evidence and your use of momentic@3.9.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.