registry / @wix/create-app / 0.0.250
@wix/create-app@0.0.250
Create Wix apps
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe scanner's claimed credential redirection and download-execute behavior was not confirmed by source inspection. The confirmed behavior is a user-selected, first-party MCP setup plus default skills installation, which is risky enough to warn but not to block as malware.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the create-app CLI, selects an IDE MCP option, or completes default dependency setup.
Impact
A generated project can acquire and launch Wix-controlled agent tooling; this is a meaningful agent-extension lifecycle risk, not confirmed credential theft or arbitrary payload execution by this package.
Mechanism
Opt-in IDE MCP configuration and unattended first-party skills installation.
AI rationale
The scanner's claimed credential redirection and download-execute behavior was not confirmed by source inspection. The confirmed behavior is a user-selected, first-party MCP setup plus default skills installation, which is risky enough to warn but not to block as malware.
Evidence
build/index.jstemplates/app/.mcp.json.ejsgenerated project/.cursor/mcp.jsongenerated project/.vscode/mcp.jsongenerated project/.mcp.json
Network endpoints1
mcp.wix.com/sse
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The interactive CLI offers MCP configuration for Cursor, VS Code, and Claude Code.
- Selected templates create IDE MCP files that run npx to obtain @wix/mcp-remote and connect to Wix's SSE endpoint.
- Project generation also runs an unattended npx command to add Wix skills unless installation is skipped.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The MCP configuration is selected through an interactive prompt and includes a No option.
- No credential harvesting, unofficial credential gateway, or hidden download-and-execute path was found in the inspected entrypoint and generator.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
11 flaggedbuild/chunk-V6PDDX7X.jsView file
2405init_esm_shims();
L2406: var cp = __require("child_process");
L2407: var parse = require_parse();
High
Child Process
Package source references child process execution.
build/chunk-V6PDDX7X.jsView on unpkg · L24052321parsed.args = ["/d", "/s", "/c", `"${shellCommand}"`];
L2322: parsed.command = process.env.comspec || "cmd.exe";
L2323: parsed.options.windowsVerbatimArguments = true;
High
build/generator-233OYLKO.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @wix/create-app@0.0.249
matchedIdentity = npm:QHdpeC9jcmVhdGUtYXBw:0.0.249
similarity = 0.917
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Findings
3 Critical7 High4 Medium5 Low
CriticalDownload Executebuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
CriticalPrevious Version Dangerous Deltabuild/generator-233OYLKO.js
HighChild Processbuild/chunk-V6PDDX7X.js
HighShellbuild/chunk-V6PDDX7X.js
HighEvalbuild/generator-233OYLKO.js
HighCredential Redirect Persistencebuild/index.js
HighCommand Output Exfiltrationbuild/index.js
HighCross File Remote Execution Contextbuild/index.js
HighSemantic Analysis Limitedbuild/generator-233OYLKO.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @wix/create-app@0.0.250.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.250 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.