malicious node part done