Currently your Node RED editor can be accessed by anyone on the internet
To me it sounds as if you have 2 ports open.
443 - fine , that is quite normal for HTTPS
1880 - A fully open Node RED instance (with no password)
Stop looking at this post - and block access now at the router (block access to port 1880)
And read this over : Safely accessing Node-RED over the Internet
And whatever you do - DO NOT POST your website address here