registry / @wix/ditto-codegen-public / 1.0.481
@wix/ditto-codegen-public@1.0.481
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe package manifest defines a CLI without install hooks. The flagged token forwarding supports project authorization through a localhost-default, operator-configurable AI proxy; the inspected esbuild install and runtime code perform ordinary platform-binary setup and service startup.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the packaged CLI and starts an AI provider request.
Impact
No confirmed attack surface was established; the inspected token forwarding is tied to the configured provider proxy.
Mechanism
Provider URLs use localhost by default or the explicitly configured CODEGEN_AI_PROXY_BASE_URL; requests include the Wix access token for authorization.
AI rationale
The package manifest defines a CLI without install hooks. The flagged token forwarding supports project authorization through a localhost-default, operator-configurable AI proxy; the inspected esbuild install and runtime code perform ordinary platform-binary setup and service startup.
Evidence
package.jsondist/out.js.lpm-dependency-evidence-5c762d27-cafb-4876-8de7-70e637abd0c5/0/npm-linux/package.json.lpm-dependency-evidence-5c762d27-cafb-4876-8de7-70e637abd0c5/0/npm-linux/install.js.lpm-dependency-evidence-5c762d27-cafb-4876-8de7-70e637abd0c5/0/npm-linux/lib/main.js
Network endpoints1
localhost:3001
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI and has no install lifecycle hook.
- The AI provider base URL defaults to localhost and is overridden only by an explicit environment setting.
- The Wix access token is attached to provider requests for project authorization; it is not sent to a hardcoded unrelated host.
- The esbuild dependency’s postinstall prepares its platform binary, and its runtime launches that binary as a service.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
7 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical5 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.481.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.481 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.