Cryptomining Malware Infecting Node-RED servers

[knolleary]

Hi - when sharing code on the forum, please follow the advice in this post: How to share code or flow json

But also note that removing the flows is not sufficient to remove the malware - at least, not the malware that led to this thread. The malware installs a cronjob that runs every minute to download its binary and run. The only way to be sure is to reinstall the OS.