registry / @wix/ditto-codegen-public / 1.0.494
@wix/ditto-codegen-public@1.0.494
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook. The flagged credential flows belong to explicit Wix development tools that send Wix access tokens to Wix API endpoints for the requested operation; no unrelated collector or hidden credential redirect was found.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user or application invokes a feedback or telemetry tool.
Impact
No unrelated credential disclosure or unauthorized action was identified.
Mechanism
The tools retrieve a Wix CLI access token and use it with Wix API endpoints to submit a feedback report or query development logs and backend requests.
AI rationale
The manifest has no install lifecycle hook. The flagged credential flows belong to explicit Wix development tools that send Wix access tokens to Wix API endpoints for the requested operation; no unrelated collector or hidden credential redirect was found.
Evidence
package.jsondist/opencode-tools/report-wix-feedback.tsdist/opencode-tools/env-tools/call-telemetry-tool.tsdist/opencode-tools/env-tools/list-telemetry-tools.ts
Network endpoints3
www.wixapis.com/mcp-serverless/v1/feedbackmanage.wix.com/_api/wix-code-devtools-data-mcp/api/v1/app/mcpmanage.wix.com/_api/wix-code-devtools-data-mcp/api/v1/site/mcp
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Manifest declares a CLI entry point but no install, preinstall, or postinstall lifecycle hook.
- The feedback tool sends a report only when explicitly executed and the message cites Wix documentation or a Wix MCP tool; it rejects out-of-scope reports.
- The feedback tool sends its Wix CLI access token to the Wix feedback API as authorization for the submitted report.
- The telemetry tools use a Wix-owned API host and send requests only when their tools are explicitly executed.
Evidence against
- The package is described as a Wix app generator, consistent with its Wix CLI, feedback, and development-log tools.
- The feedback tool’s report input explicitly says not to include secrets or tokens.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical7 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
HighKnown Malware Source Similaritydist/out.js
HighKnown Malware Source Similaritydist/opencode-tools/report-wix-feedback.ts
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.494.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.494 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.