registry / @wix/ditto-codegen-public / 1.0.501
@wix/ditto-codegen-public@1.0.501
AI-powered Wix CLI app generator - standalone executable
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged credential flows target Wix services or the local AI proxy used for code generation, and feedback submission requires a user tool call with an in-scope citation. The manifest has no install hook, and I found no evidence of credential exfiltration or unauthorized actions.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when invoked; feedback and log queries run when their tools are called.
Impact
The inspected flows support the package’s stated features; no unrelated credential destination or unauthorized account action was found.
Mechanism
AI requests use a local proxy by default, with a user-configurable base URL. Feedback and diagnostics use Wix endpoints and Wix authentication.
AI rationale
The flagged credential flows target Wix services or the local AI proxy used for code generation, and feedback submission requires a user tool call with an in-scope citation. The manifest has no install hook, and I found no evidence of credential exfiltration or unauthorized actions.
Network endpoints3
localhost:3001manage.wix.comwww.wixapis.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a Wix CLI app generator, has no install lifecycle scripts, and exposes dist/out.js as its executable.
- The AI provider defaults to a local proxy at http://localhost:3001; its base URL can be set through CODEGEN_AI_PROXY_BASE_URL.
- Provider configuration sends the Wix token to the proxy to resolve the account and authorize the project.
- The feedback tool sends a report only after the user invokes it and the message cites Wix documentation or a Wix MCP tool.
- The log query tools are described as read-only and send Wix authentication to manage.wix.com.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/out.jsView file
140L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/out.jsView on unpkg · L140140Trigger-reachable chain: manifest.bin -> dist/out.js
L140:
L141: // ../../node_modules/dotenv/package.json
L142: var require_package = __commonJS({
...
L176: },
L177: homepage: "https://github.com/motdotla/dotenv#readme",
L178: funding: "https://dotenvx.com",
...
L242: function supportsAnsi() {
L243: return process.stdout.isTTY;
L244: }
...
L273: if (!result.parsed) {
L274: const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
L275: err.code = "MISSING_DATA";
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/out.jsView on unpkg · L140Findings
2 Critical7 High3 Medium6 Low
CriticalCredential Exfiltrationdist/out.js
CriticalTrigger Reachable Dangerous Capabilitydist/out.js
HighChild Processdist/out.js
HighShelldist/out.js
HighCredential Redirect Persistencedist/out.js
HighCommand Output Exfiltrationdist/out.js
HighTrigger Reachable Credential Exfiltrationdist/out.js
HighKnown Malware Source Similaritydist/out.js
HighKnown Malware Source Similaritydist/opencode-tools/report-wix-feedback.ts
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @wix/ditto-codegen-public@1.0.501.
See all versions of @wix/ditto-codegen-public for other recorded verdicts.
- Review the evidence and your use of @wix/ditto-codegen-public@1.0.501 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.