registry / @wix/ditto-codegen-public / 1.0.498
@wix/ditto-codegen-public@1.0.498
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged flows are part of the Wix code generation purpose: Wix tokens are sent to Wix endpoints for user-invoked feedback and telemetry queries, while AI provider routing defaults to a local proxy. The manifest has no install hook, and the reviewed sources show no automatic third-party credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when invoked; feedback and telemetry network calls occur only when their corresponding tools are called.
Impact
No unauthorized credential disclosure or other harmful impact was identified.
Mechanism
The reviewed flows use Wix endpoints for Wix-authenticated feedback and telemetry, while AI provider requests use a configurable proxy that defaults to localhost.
AI rationale
The flagged flows are part of the Wix code generation purpose: Wix tokens are sent to Wix endpoints for user-invoked feedback and telemetry queries, while AI provider routing defaults to a local proxy. The manifest has no install hook, and the reviewed sources show no automatic third-party credential exfiltration.
Evidence
package.jsondist/out.jsdist/opencode-tools/report-wix-feedback.tsdist/opencode-tools/env-tools/call-telemetry-tool.tsdist/opencode-tools/env-tools/list-telemetry-tools.ts
Network endpoints3
www.wixapis.commanage.wix.comlocalhost:3001
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a Wix app generator CLI, exposes dist/out.js as its bin, and declares no install lifecycle scripts.
- The feedback tool sends a report only after the message cites Wix docs or an allowed wix-mcp tool and passes an out-of-scope check; it uses Wix's feedback API.
- The telemetry tools are described as user-directed, read-only queries about the edited app or site's logs and backend requests, sent to manage.wix.com.
- The AI provider proxy defaults to localhost:3001 and can be configured through CODEGEN_AI_PROXY_BASE_URL.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical7 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
HighKnown Malware Source Similaritydist/out.js
HighKnown Malware Source Similaritydist/opencode-tools/report-wix-feedback.ts
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.498.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.498 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.