[krod]

The most likely problem is that you have sv_cheats enabled and it has been compromised through that.

Else, it could be an eventscript as their scripts are not approved by anyone and thus could be a backdoor.