@wix/ditto-codegen-public@1.0.480
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe environment override can direct provider requests carrying a Wix access token to an unrestricted endpoint, creating conditional credential exposure. The default is localhost, and the source does not establish covert export to a fixed external recipient.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Run code generation with a provider request while CODEGEN_AI_PROXY_BASE_URL points to an external endpoint.
Impact
The configured endpoint can receive the Wix access token.
Mechanism
The provider configuration adds the Wix token to the authorization header and uses the configurable proxy base URL for provider requests.
AI rationale
The environment override can direct provider requests carrying a Wix access token to an unrestricted endpoint, creating conditional credential exposure. The default is localhost, and the source does not establish covert export to a fixed external recipient.
Evidence
dist/out.js
Network endpoints1
localhost:3001
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- dist/out.js defaults the AI proxy to localhost but lets CODEGEN_AI_PROXY_BASE_URL replace its base URL.
- The provider config adds the current Wix access token as a bearer authorization header and uses it for provider requests.
- The generated OpenCode configuration is passed to the child process during a code generation run.
- The unresolved dependency receiver formats esbuild build errors; its postinstall handles platform binary setup and downloads from the npm registry when needed.
- package.json exposes dist/out.js as the package CLI.
Evidence against
- The default proxy endpoint is http://localhost:3001; source does not configure a fixed external recipient.
- Credential exposure requires the consumer to set the proxy environment override and run a provider request.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
7 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical5 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.480.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.480 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.