Malware found in node-red project

@Bolukan is your node-red instance configured with auth? If yes, and the updates were done via the API, then your credentials have also leaked