# Cryptomining Malware Infecting Node-RED servers

**URL:** https://discourse.nodered.org/t/cryptomining-malware-infecting-node-red-servers/3454
**Category:** General
**Created:** [25 September 2018 19:06 UTC](https://discourse.nodered.org/t/cryptomining-malware-infecting-node-red-servers/3454 "2018-09-25T19:06:41Z")
**Posts on this page:** 1
**Showing post:** 20

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [28 January 2019 10:52 UTC](https://discourse.nodered.org/t/cryptomining-malware-infecting-node-red-servers/3454/20 "2019-01-28T10:52:34Z")

</div>

Hi - when sharing code on the forum, please follow the advice in this post: [How to share code or flow json](https://discourse.nodered.org/t/how-to-share-code-or-flow-json/506)

But also note that removing the flows is _not_ sufficient to remove the malware - at least, not the malware that led to this thread. The malware installs a cronjob that runs every minute to download its binary and run. The only way to be sure is to reinstall the OS.

---

_[View the full topic](https://discourse.nodered.org/t/cryptomining-malware-infecting-node-red-servers/3454)._