registry / @wix/ditto-codegen-public / 1.0.497
@wix/ditto-codegen-public@1.0.497
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install hook, and the flagged credential flows are for Wix feedback, telemetry queries, or the codegen provider proxy. The source does not show credentials sent to an unrelated collector or an automatically persisted external gateway.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The feedback and telemetry requests occur when their respective tools are invoked; provider requests occur as part of code generation.
Impact
No evidence shows automatic credential collection, unrelated exfiltration, or persistence of an external gateway redirection.
Mechanism
The tools use a Wix CLI access token with Wix endpoints. The AI provider configuration defaults to a local proxy and project-specific provider routes.
AI rationale
The manifest has no install hook, and the flagged credential flows are for Wix feedback, telemetry queries, or the codegen provider proxy. The source does not show credentials sent to an unrelated collector or an automatically persisted external gateway.
Evidence
package.jsondist/out.jsdist/opencode-tools/report-wix-feedback.tsdist/opencode-tools/env-tools/call-telemetry-tool.ts
Network endpoints5
www.wixapis.com/mcp-serverless/v1/feedbackmanage.wix.com/_api/wix-code-devtools-data-mcp/api/v1localhost:3001/projects/${projectId}/genai/anthropiclocalhost:3001/projects/${projectId}/genai/openailocalhost:3001/projects/${projectId}/genai/google/v1beta
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entry point and declares only build and test scripts; it has no install lifecycle script.
- The feedback tool returns without sending unless its argument cites Wix documentation or a Wix MCP tool and passes its scope check.
- When invoked, the feedback tool obtains a Wix CLI token and posts a report to Wix’s feedback API.
- The telemetry tool is described as a user-run, read-only query tool for logs and backend requests, and its endpoint is on manage.wix.com.
- The AI provider base URL defaults to localhost and uses project-specific Wix codegen proxy paths; the source does not hard-code an unofficial external gateway.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical7 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
HighKnown Malware Source Similaritydist/out.js
HighKnown Malware Source Similaritydist/opencode-tools/report-wix-feedback.ts
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.497.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.497 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.