diff --git a/javascript/ql/src/Security/CWE-916/examples/InsufficientPasswordHash_CryptoJS.js b/javascript/ql/src/Security/CWE-916/examples/InsufficientPasswordHash_CryptoJS.js
deleted file mode 100644
index c0a621f85b1..00000000000
--- a/javascript/ql/src/Security/CWE-916/examples/InsufficientPasswordHash_CryptoJS.js
+++ /dev/null
@@ -1,8 +0,0 @@
-const crypto = require('crypto-js')
-function hashPassword(email, password) {
-  var algo = crypto.algo.SHA512.create()
-  algo.update(password, 'utf-8') // BAD
-  algo.update(email.toLowerCase(), 'utf-8')
-  var hash = algo.finalize()
-  return hash.toString(crypto.enc.Base64)
-}
\ No newline at end of file