If you have opened your node-red to the internet (for remote access) without proper security,
there is a good chance your system is compromised.
Please read through the threads in security (start with this one: Safely accessing Node-RED over the Internet)