Loading npm security reports…
Internal Windows installer for Bikli CLI and Bikli Wrapper
npm postinstall elevates Windows privileges, enables and exposes RDP, and provisions a hidden privileged account using package configuration. This creates unattended remote-access persistence.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships native binary artifacts.
payload/bikli-cli-installer.exeView on unpkgBundled config contains a non-empty administrator password; install enables/creates an RDP administrator, grants privileged groups, and hides it.
bin/biklimaster.jsView on unpkg · L265Bundled config contains a non-empty administrator password; install enables/creates an RDP administrator, grants privileged groups, and hides it.
bin/biklimaster.jsView on unpkg · L277It disables Network Level Authentication and permits permissionless RDP shadowing.
lib/bikliwrapper.jsView on unpkg · L63Bundled config contains a non-empty administrator password; install enables/creates an RDP administrator, grants privileged groups, and hides it.
bin/biklimaster.jsView on unpkg · L281Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L26Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L26Package ships native binary artifacts.
payload/bikli-cli-installer.exeView on unpkgBundled config contains a non-empty administrator password; install enables/creates an RDP administrator, grants privileged groups, and hides it.
bin/biklimaster.jsView on unpkg · L265Bundled config contains a non-empty administrator password; install enables/creates an RDP administrator, grants privileged groups, and hides it.
bin/biklimaster.jsView on unpkg · L277Bundled config contains a non-empty administrator password; install enables/creates an RDP administrator, grants privileged groups, and hides it.
bin/biklimaster.jsView on unpkg · L281It disables Network Level Authentication and permits permissionless RDP shadowing.
lib/bikliwrapper.jsView on unpkg · L63