registry / biklitool / 1.1.17

biklitool@1.1.17

Internal Windows installer for Bikli CLI and Bikli Wrapper

AI Security Review

scanned 1d ago · by lpm-firewall-ai

On Windows npm install, the package requests elevation and provisions remote desktop access. It creates or enables a privileged local account, hides it, weakens RDP security, and opens inbound port 3389.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall on Windows

Impact

Unauthorized persistent remote access to the host.

Mechanism

elevated hidden-account and RDP/firewall configuration

Attack narrative

Installing the package launches its install routine without an explicit CLI command. That routine elevates through UAC, installs bundled executables, enables RDP, creates or enables a local administrator, adds it to Remote Desktop Users, hides it from the sign-in screen, weakens RDP settings, and opens port 3389. This is a concrete persistence and remote-access chain.

Rationale

The install-time behavior is unconsented and materially changes host authentication and network exposure. The absence of outbound JavaScript networking does not mitigate the local backdoor behavior.

Evidence

package.jsonbin/biklimaster.jslib/bikliwrapper.jspayload/bikli-cli-installer.exepayload/RDPWInst.exepayload/rdpwrap.ini

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

postinstall unconditionally invokes the install command.
Install enables RDP, invokes bundled installers, and creates an RDP administrator.
PowerShell enables/adds a local account to Administrators and Remote Desktop Users, then hides it from sign-in.
Wrapper disables NLA, permits unattended shadowing, and adds inbound RDP firewall rules.

Evidence against

No JavaScript HTTP client or remote download endpoint was found in inspected source.
Actions are Windows-gated and request UAC elevation, but are still initiated by postinstall.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 43.2 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool": "bin/biklimaster.js",

14 "biklimaster": "bin/biklimaster.js",

15 "bikliwrapper": "lib/bikliwrapper.js"

16 },

17 "files": [

18 "bin",

19 "lib",

20 "payload",

21 "config.json",

22 "README.md",

23 "LICENSE-BIKLI",

24 "LICENSE-RDPWRAPPER"

25 ],

26 "scripts": {

27 "postinstall": "node bin/biklimaster.js install --postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "node bin/biklimaster.js self-test"

29 },

30 "engines": {

31 "node": ">=18"

32 },

33 "keywords": [

34 "bikli",

35 "rdp",

36 "vpn",

37 "windows",

38 "installer"

39 ]

40}

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

bin/biklimaster.jsView file

Lines 180-220javascript

180}

181

182function verifyRemoteDesktop() {

183 const state = remoteDesktopState();

184 if (!state.enabled) fail('Remote Desktop could not be enabled.'

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/biklimaster.js install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/biklimaster.js install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

Findings

3 High4 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighAi Review Evidencebin/biklimaster.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Native Binarypayload/bikli-cli-installer.exe

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings