Loading npm security reports…
Internal Windows installer for Bikli CLI and Bikli Wrapper
On npm postinstall, the package seeks elevation and installs bundled Windows payloads. It enables an exposed RDP service, provisions a hidden administrator-capable account, and disguises the installed service.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgnpm postinstall invokes the installer automatically.
package.jsonView on unpkg · L26Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships native binary artifacts.
payload/bikli-cli-installer.exeView on unpkgInstall silently runs bundled executables, enables RDP, and creates an administrator-capable account.
bin/biklimaster.jsView on unpkg · L557It disguises its service as a Windows host process and removes App Paths entries.
bin/biklimaster.jsView on unpkg · L471RDP defaults disable NLA and allow full session shadowing without permission.
lib/bikliwrapper.jsView on unpkg · L60Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L27Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L27npm postinstall invokes the installer automatically.
package.jsonView on unpkg · L26Package ships native binary artifacts.
payload/bikli-cli-installer.exeView on unpkgIt disguises its service as a Windows host process and removes App Paths entries.
bin/biklimaster.jsView on unpkg · L471Install silently runs bundled executables, enables RDP, and creates an administrator-capable account.
bin/biklimaster.jsView on unpkg · L557RDP defaults disable NLA and allow full session shadowing without permission.
lib/bikliwrapper.jsView on unpkg · L60