wix-replatform

This is a Wix API migration/client module and shows no clear malicious behavior. The principal security concern is that caller-controlled request URLs can receive the configured Wix Authorization header, potentially exposing credentials if an untrusted caller controls the URL; dry-run captures can also retain personal data. It communicates with https://www[.]wixapis[.]com and can write captures to the configured path or projectDir/state/attempts/wix-request-captures.ndjson. Overall severity is moderate and conditional on control of request URLs or capture configuration.

The fragment is a readable integration manifest for importing WooCommerce back-in-stock subscriber data. It does not contain executable malware or an obfuscated payload, but it specifies a path for broad retrieval and downstream transfer of sensitive subscriber information and documents a persistent record-creation endpoint. Use requires explicit store authorization, strict access control, data minimization, and validation of the target importer. The configuration presents a significant privacy and data-handling risk if deployed without those controls.