registry / @wix/ditto-codegen-public
@wix/ditto-codegen-public
AI-powered Wix CLI app generator - standalone executable
This report shows the evidence for @wix/ditto-codegen-public@1.0.502. 0 of 67 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest declares no install hook, and the flagged credential flows send Wix tokens to Wix services for project features. The provider proxy is project-scoped and defaults to localhost; the reviewed source shows no unrelated credential destination or harmful automatic action.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when invoked; telemetry queries and feedback requests run only when their tools are called.
Impact
These flows support the package’s stated functionality; no unrelated credential exfiltration or harmful automatic action was found.
Mechanism
The CLI configures project-scoped AI provider proxy URLs. The query tools obtain a Wix token and send requests to Wix services; the feedback tool sends a submitted report to Wix.
AI rationale
The manifest declares no install hook, and the flagged credential flows send Wix tokens to Wix services for project features. The provider proxy is project-scoped and defaults to localhost; the reviewed source shows no unrelated credential destination or harmful automatic action.
Evidence
dist/out.jsdist/opencode-tools/env-tools/call-telemetry-tool.tsdist/opencode-tools/report-wix-feedback.ts
Network endpoints3
manage.wix.com/_api/wix-code-devtools-data-mcp/api/v1www.wixapis.com/mcp-serverless/v1/feedbacklocalhost:3001
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hooks; its executable is dist/out.js.
- Telemetry query tools send Wix access tokens to the Wix manage.wix.com service when explicitly invoked.
- The feedback tool sends a user-submitted report to Wix’s www.wixapis.com endpoint and requires a relevant documentation citation.
- AI provider requests use a project-scoped proxy URL, defaulting to localhost:3001, with Wix project and environment headers.
- The CLI initializes its OpenCode integration when its main command starts.
Evidence against
- The credential and network flows identified are tied to Wix services and the package’s code generation, query, and feedback features.
- No automatic install-time credential collection or unrelated credential destination was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
7 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical5 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.502.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.502 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.