registry / sbman / 1.0.0

sbman@1.0.0

Internal Windows installer for Bikli CLI and Bikli Wrapper

AI Security Review

scanned 3h ago · by lpm-firewall-ai

npm postinstall elevates and configures a concealed privileged Windows RDP backdoor. It creates or enables a hidden administrator, weakens RDP authentication, and opens port 3389.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm installation on Windows runs postinstall.

Impact

Unauthorized remote access and persistent privileged access on the installed host.

Mechanism

Elevated hidden-account creation, RDP weakening, firewall exposure, and service disguise.

Attack narrative

On npm installation, the package invokes an elevated installer. It installs bundled Windows binaries, configures Remote Desktop with Network Level Authentication disabled and permissionless shadowing, opens inbound RDP firewall rules, and creates or enables a hidden administrator account with Remote Desktop Users membership. It then disguises the service as a Windows infrastructure component and hides related folders, producing a stealthy persistent remote-access path.

Rationale

This is concrete install-time privilege escalation, stealth, and remote-access enablement rather than a legitimate package-aligned installer. The absence of a web endpoint does not mitigate the local backdoor behavior.

Evidence

package.jsonbin/biklimaster.jslib/bikliwrapper.jspayload/bikli-cli-installer.exepayload/RDPWInst.exepayload/rdpwrap.iniconfig.json

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

postinstall invokes the privileged installer automatically.
Install enables/creates a hidden local administrator and adds it to RDP users.
RDP configuration disables NLA and permits shadowing without permission.
Installer opens inbound TCP/UDP 3389 firewall rules.
It disguises the installed service as a Windows infrastructure host and hides protected folders.

Evidence against

No source-level web or exfiltration endpoint was found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 67.0 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool": "bin/biklimaster.js",

14 "biklimaster": "bin/biklimaster.js",

15 "bikliwrapper": "lib/bikliwrapper.js"

16 },

17 "files": [

18 "bin",

19 "lib",

20 "payload",

21 "config.json",

22 "README.md",

23 "LICENSE-BIKLI",

24 "LICENSE-RDPWRAPPER"

25 ],

26 "scripts": {

27 "postinstall": "node bin/biklimaster.js install --postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "node bin/biklimaster.js self-test"

29 },

30 "engines": {

31 "node": ">=18"

32 },

33 "keywords": [

34 "bikli",

35 "rdp",

36 "vpn",

37 "windows",

38 "installer"

39 ]

40}

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

bin/biklimaster.jsView file

Lines 745-785javascript

745 fail('Usernames may only contain letters, digits, dots, dashes, and underscores (max 20).');

746 }

747 return name;

748}

749

750function createRdpAdministrator() {

751 requireWindows();

752

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/biklimaster.js install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/biklimaster.js install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

Findings

3 High4 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighKnown Malware Source Fingerprint Signaturebin/biklimaster.js

HighAi Review Evidencebin/biklimaster.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Native Binarypayload/bikli-cli-installer.exe

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings