registry / @wix/create-app / 0.0.269
@wix/create-app@0.0.269
Create Wix apps
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe package is a CLI with no install lifecycle hook, and the inspected high-risk matches resolve to ordinary function parsing, shell-disabled command execution, and Wix account requests. Its MCP configuration is optional and project-scoped; the inspected source did not establish an attack chain or unrelated credential transfer.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the CLI; MCP setup occurs after the user reaches the project setup flow and selects an IDE.
Impact
No malicious effect or unrelated credential recipient was established.
Mechanism
The CLI reads saved authentication data for account requests and can create an IDE MCP configuration in the generated project folder.
AI rationale
The package is a CLI with no install lifecycle hook, and the inspected high-risk matches resolve to ordinary function parsing, shell-disabled command execution, and Wix account requests. Its MCP configuration is optional and project-scoped; the inspected source did not establish an attack chain or unrelated credential transfer.
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to a CLI entrypoint and lists build, development, test, and typecheck scripts, with no install lifecycle hook.
- The MCP setup presents IDE choices in the CLI and resolves the selected configuration file inside the generated project folder.
- Authentication code reads saved API-key data and uses the Wix account client; the inspected service base URLs are Wix domains.
- The flagged generator code parses function data, and the package-manager command helper disables shell execution.
- The Sentry integration loader uses its configured CDN base or the Sentry browser CDN.
Evidence against
- Static labels for dynamic code, child processes, network access, and download execution are not proof of an attack; the inspected code shows a function parser, a shell-disabled command helper, and Wix account endpoints.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
9 flaggedbuild/chunk-4SRG5UGT.jsView file
2405init_esm_shims();
L2406: var cp = __require("child_process");
L2407: var parse = require_parse();
High
Child Process
Package source references child process execution.
build/chunk-4SRG5UGT.jsView on unpkg · L2405build/generator-3NZGOROC.jsView file
242exports.localsName = _DEFAULT_LOCALS_NAME;
L243: exports.promiseImpl = new Function("return this;")().Promise;
L244: exports.resolveInclude = function(name, filename, isDir) {
High
Eval
Package source references dynamic code evaluation.
build/generator-3NZGOROC.jsView on unpkg · L242•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Findings
2 Critical6 High4 Medium5 Low
CriticalDownload Executebuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
HighChild Processbuild/chunk-4SRG5UGT.js
HighEvalbuild/generator-3NZGOROC.js
HighCredential Redirect Persistencebuild/index.js
HighCommand Output Exfiltrationbuild/index.js
HighCross File Remote Execution Contextbuild/index.js
HighSemantic Analysis Limitedbuild/generator-3NZGOROC.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Modulebuild/yoga.wasm
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/create-app@0.0.269.
See all versions of @wix/create-app for other recorded verdicts.
- Review the evidence and your use of @wix/create-app@0.0.269 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.