wix-vibe-headless

This module implements Wix OAuth token storage and authenticated API requests. It stores access and refresh tokens in localStorage and can send the access token to an arbitrary host if an untrusted caller controls the absolute path passed to wixApiRequest(); requests should be restricted to the Wix API origin. No clear malware or intentional data theft is evident; the primary concern is credential exposure, with moderate security severity.