Nodered hacked by adding invisible nodes

This has been offered here How to 'whitelist' IP address's that can access Node RED