registry / sbman / 1.0.1

sbman@1.0.1

Internal Windows installer for Bikli CLI and Bikli Wrapper

AI Security Review

scanned 1h ago · by lpm-firewall-ai

On npm postinstall, the package requests elevation, installs native payloads, enables and weakens RDP, creates or enables a hidden administrator account, and conceals its files/service. This is concrete unauthorized remote-access persistence behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall on Windows

Impact

Creates concealed privileged remote access and exposes inbound RDP on port 3389.

Mechanism

elevated RDP backdoor setup and Windows service impersonation

Attack narrative

Installing the package triggers its postinstall handler. The handler elevates, silently executes bundled installers, applies registry settings that enable insecure RDP and shadowing, opens port 3389, creates or enables an administrator/RDP user, hides it from the sign-in screen, and disguises the service as Windows infrastructure. These actions establish concealed privileged remote access without an explicit user command.

Rationale

The postinstall path performs an automated, stealth-oriented privileged remote-access setup. The behavior is concrete and unrelated to a normal npm dependency installation.

Evidence

package.jsonbin/biklimaster.jslib/bikliwrapper.jspayload/bikli-cli-installer.exepayload/RDPWInst.exepayload/rdpwrap.iniconfig.json

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

npm postinstall automatically invokes the privileged install path.
Install creates/enables an administrator-capable RDP account and hides it from the sign-in screen.
RDP settings disable Network Level Authentication and allow full shadow access without permission.
Installer opens inbound TCP/UDP port 3389 firewall rules.
It rewrites executable identity and service metadata to impersonate Windows infrastructure.

Evidence against

No source-level HTTP/network exfiltration endpoint was found.
Bundled payloads are hash-checked before execution, but their native behavior was not executed or relied upon.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 67.0 KB of source

Source & flagged code

5 flagged

package.jsonView file

Lines 7-41json

7 "access": "public"

8 },

9 "os": [

10 "win32"

11 ],

12 "bin": {

13 "biklitool": "bin/biklimaster.js",

14 "biklimaster": "bin/biklimaster.js",

15 "bikliwrapper": "lib/bikliwrapper.js"

16 },

17 "files": [

18 "bin",

19 "lib",

20 "payload",

21 "config.json",

22 "README.md",

23 "LICENSE-BIKLI",

24 "LICENSE-RDPWRAPPER"

25 ],

26 "scripts": {

27 "postinstall": "node bin/biklimaster.js install --postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L27

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L27

28 "test": "node bin/biklimaster.js self-test"

29 },

30 "engines": {

31 "node": ">=18"

32 },

33 "keywords": [

34 "bikli",

35 "rdp",

36 "vpn",

37 "windows",

38 "installer"

39 ]

40}

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

bin/biklimaster.jsView file

Lines 745-793javascript

745 fail('Usernames may only contain letters, digits, dots, dashes, and underscores (max 20).');

746 }

747 return name;

748}

749

750function createRdpAdministrator() {

751 requireWindows();

752

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/biklimaster.js install --postinstall

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node bin/biklimaster.js install --postinstall

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

payload/bikli-cli-installer.exeView file

•path = payload/bikli-cli-installer.exe kind = native_binary sizeBytes = 11639800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

payload/bikli-cli-installer.exeView on unpkg

Findings

3 High4 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

HighAi Review Evidencebin/biklimaster.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Native Binarypayload/bikli-cli-installer.exe

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings