diff --git a/javascript/ql/src/Security/CWE-916/InsufficientPasswordHash.qhelp b/javascript/ql/src/Security/CWE-916/InsufficientPasswordHash.qhelp
index f9e3a5b3857..1efdbe694b1 100644
--- a/javascript/ql/src/Security/CWE-916/InsufficientPasswordHash.qhelp
+++ b/javascript/ql/src/Security/CWE-916/InsufficientPasswordHash.qhelp
@@ -37,7 +37,7 @@
 		the hash of a password.
 	</p>
 
-	<sample src="examples/InsufficientPasswordHash_NodeJS.js"/>
+	<sample src="examples/InsufficientPasswordHash.js"/>
 
 	<p>
 		This is not secure, since the password can be efficiently
@@ -46,7 +46,7 @@
 		algorithm:
 	</p>
 
-	<sample src="examples/InsufficientPasswordHash_NodeJS_fixed.js"/>
+	<sample src="examples/InsufficientPasswordHash_fixed.js"/>
 </example>
 
 <references>