# Something interesting I just found. What is this?
**URL:** https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474
**Category:** General
**Created:** [8 June 2025 08:35 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474 "2025-06-08T08:35:08Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@Trying\_to\_learn](https://discourse.nodered.org/u/Trying_to_learn)
#### Post date: [8 June 2025 08:35 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474/1 "2025-06-08T08:35:08Z")
Luckily I had a VERY recent backup.
One of my machines just died again.
So I _VNC'd_ into the machine, made another backup, then put the older version stuff in the directory.
# HOWEVER
There was another file in the `node-red` directory.
`de16`
(no extension)
Looks like a node's code.
Looking further: it was/IS a `/bin/bash` file!
It is too big to include.
I'm working on how to post it to _Share_
Should I be worried?
(Stay tuned)
Ok, asking for options for sites....
File
[https://filebin.net/hs2cvn5lnokydezi](https://filebin.net/hs2cvn5lnokydezi)
---
### Author:  [@GogoVega](https://discourse.nodered.org/u/GogoVega)
#### Post date: [8 June 2025 08:45 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474/2 "2025-06-08T08:45:52Z")
Looks like the NR install script
[https://raw.githubusercontent.com/node-red/linux-installers/master/deb/update-nodejs-and-nodered](https://raw.githubusercontent.com/node-red/linux-installers/master/deb/update-nodejs-and-nodered)
---
### Author:  [@Trying\_to\_learn](https://discourse.nodered.org/u/Trying_to_learn)
#### Post date: [8 June 2025 08:47 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474/3 "2025-06-08T08:47:01Z")
How (semi rhetorical) would it get into MY `node-red` folder?
Just wondering.
---
### Author:  [@jbudd](https://discourse.nodered.org/u/jbudd)
#### Post date: [8 June 2025 08:53 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474/4 "2025-06-08T08:53:19Z")
From time to time I have suggested that people having difficulties with the Node-red install script try breaking it into two steps - a) download it and b) run it.
No claiming responsibility ( 😉) but maybe something like that happened?
What's the creation date of the file?
---
### Author:  [@Trying\_to\_learn](https://discourse.nodered.org/u/Trying_to_learn)
#### Post date: [8 June 2025 09:04 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474/5 "2025-06-08T09:04:16Z")
23/10/22
So big shame on me for not seeing it sooner.
But - sorry, excuse - it is a REMOTE machine that is headless.
I only _noticed_ it because the flow died and I had to _roll back_ to yesterday's.
That is done (by me) via VNC. I'm a bit of a GUI guy.
And when I looked in the folder noticed it.
And another file. But I know that we me trying to `SCP` a file and did a typo.
---
### Author:  [@Trying\_to\_learn](https://discourse.nodered.org/u/Trying_to_learn)
#### Post date: [8 June 2025 09:23 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474/6 "2025-06-08T09:23:02Z")
Since it is nothing malicious and it now deleted....
Thanks.
Resolved.
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [22 June 2025 09:23 UTC](https://discourse.nodered.org/t/something-interesting-i-just-found-what-is-this/97474/7 "2025-06-22T09:23:03Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.