registry / @wix/ditto-codegen-public / 1.0.493
@wix/ditto-codegen-public@1.0.493
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged credential flows are tied to Wix APIs and the configurable AI proxy used by this Wix code generation CLI. The feedback tool requires a relevant Wix docs citation before sending, and the manifest declares no install lifecycle hook.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Runtime use of the code generation CLI, AI proxy, or explicitly invoked documentation feedback and telemetry tools.
Impact
No unauthorized credential disclosure or unrelated data collection was identified in the reviewed paths.
Mechanism
The CLI routes AI requests through a configurable proxy and uses Wix credentials for Wix account and project authorization. Feedback requests require a relevant Wix docs citation and go to a Wix API host.
AI rationale
The flagged credential flows are tied to Wix APIs and the configurable AI proxy used by this Wix code generation CLI. The feedback tool requires a relevant Wix docs citation before sending, and the manifest declares no install lifecycle hook.
Network endpoints3
www.wixapis.commanage.wix.comCODEGEN_AI_PROXY_BASE_URL (default http://localhost:3001)
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a Wix CLI app generator and exposes dist/out.js as its executable; its manifest has no install lifecycle hook.
- The feedback tool sends reports to a Wix API only after checking that the report cites a Wix docs URL or tool and is in scope.
- The feedback request uses a Wix access token and sends the report to www.wixapis.com, Wix's API host.
- The AI proxy URL is configurable through CODEGEN_AI_PROXY_BASE_URL and otherwise defaults to localhost; the configured Wix token is passed in headers for the proxy's described account authorization and billing behavior.
- The telemetry tools are described as running a query on the logs or backend requests of the code being edited and returning the result as untrusted data.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical7 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
HighKnown Malware Source Similaritydist/out.js
HighKnown Malware Source Similaritydist/opencode-tools/report-wix-feedback.ts
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.493.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.493 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.