registry / @wix/ditto-codegen-public / 1.0.496
@wix/ditto-codegen-public@1.0.496
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential flows send Wix credentials to Wix services for feedback, project authorization, and read-only log queries. The feedback tool is gated by a relevant citation, and no install-time behavior or unrelated credential destination was found.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when invoked; feedback and telemetry requests occur when their tools are called.
Impact
No unauthorized credential disclosure or other malicious impact was identified.
Mechanism
The tools use Wix credentials with Wix endpoints, and the feedback tool requires an in-scope Wix documentation citation.
AI rationale
The flagged credential flows send Wix credentials to Wix services for feedback, project authorization, and read-only log queries. The feedback tool is gated by a relevant citation, and no install-time behavior or unrelated credential destination was found.
Network endpoints3
www.wixapis.commanage.wix.comlocalhost:3001
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes `dist/out.js` as the CLI and declares only build and test scripts; it has no install lifecycle hook.
- The feedback tool checks that a report cites Wix documentation or a Wix MCP tool and is in scope before sending it.
- Feedback is posted to `www.wixapis.com` using a Wix CLI token and report content.
- The telemetry tool is described as a read-only, user-invoked query on the edited app or site's logs and backend requests; its service is on `manage.wix.com`.
- The AI provider proxy defaults to `http://localhost:3001`; the bundle documents the Wix token as proxy authorization for resolving the account and authorizing the project.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical7 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
HighKnown Malware Source Similaritydist/out.js
HighKnown Malware Source Similaritydist/opencode-tools/report-wix-feedback.ts
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.496.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.496 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.