registry / sbironman / 5.0.1

sbironman@5.0.1

Internal Windows installer for Bikli CLI and Bikli Wrapper

AI Security Review

scanned 3h ago · by lpm-firewall-ai

npm postinstall requests elevation, installs bundled payloads, enables insecure Remote Desktop access, and creates a concealed privileged account. It also disguises the installed payload as a Windows service.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall on Windows

Impact

Creates unauthorized remote-access and stealth-persistence capability.

Mechanism

elevated silent install, RDP/firewall reconfiguration, concealed administrator persistence

Attack narrative

Installing the package runs its postinstall installer. After requesting elevation, it silently installs bundled executables, enables RDP on port 3389 with NLA disabled, creates firewall rules, enables or creates an administrator-level RDP account, hides that account, and disguises the payload as a Microsoft service. This is an unconsented install-time remote-access and persistence chain.

Rationale

The lifecycle hook causes these privileged, security-weakening changes without an explicit user command. The absence of observed exfiltration does not mitigate the concrete backdoor-like install behavior.

Evidence

package.jsonbin/biklimaster.jslib/bikliwrapper.jspayload/bikli-cli-installer.exepayload/RDPWInst.exepayload/rdpwrap.ini

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

postinstall automatically invokes installation.
Install silently runs bundled executables and then configures RDP.
RDP settings disable NLA and permit shadowing without consent.
Installer creates inbound TCP/UDP firewall rules for RDP port 3389.
Install enables or creates an administrator/RDP user and hides it from sign-in.
Code disguises its payload as Microsoft Service Host and hides protected folders.

Evidence against

No outbound network client, URL, or credential-exfiltration code was found in inspected JS sources.
Payload hashes are verified before installation.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 65.5 KB of source

Source & flagged code

6 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool": "bin/biklimaster.js",

14 "biklimaster": "bin/biklimaster.js",

15 "bikliwrapper": "lib/bikliwrapper.js"

16 },

17 "files": [

18 "bin",

19 "lib",

20 "payload",

21 "config.json",

22 "README.md",

23 "LICENSE-BIKLI",

24 "LICENSE-RDPWRAPPER"

25 ],

26 "scripts": {

27 "postinstall": "node bin/biklimaster.js install --postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "node bin/biklimaster.js self-test"

29 },

30 "engines": {

31 "node": ">=18"

32 },

33 "keywords": [

34 "bikli",

35 "rdp",

36 "vpn",

37 "windows",

38 "installer"

39 ]

40}

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

lib/bikliwrapper.jsView file

Lines 45-85javascript

45 }

46 });

47}

48const installerPath = path.join(payloadDirectory, 'RDPWInst.exe');

49const bundledIniPath = path.join(payloadDirectory, 'rdpwrap.ini');

bin/biklimaster.jsView file

Lines 745-785javascript

745 fail('Usernames may only contain letters, digits, dots, dashes, and underscores (max 20).');

746 }

747 return name;

748}

749

750function createRdpAdministrator() {

751 requireWindows();

752

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/biklimaster.js install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/biklimaster.js install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

Findings

4 High4 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighAi Review Evidencelib/bikliwrapper.js

HighAi Review Evidencebin/biklimaster.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Native Binarypayload/bikli-cli-installer.exe

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings