Guys, who lost anything. Mex did huge help with this hacker, so, please PM me and I'll get your money back to you.Now script security is fixed. Also, refresh your API keys - both webminepool and faucethub.
I changed default admin and pass, but for the moment i took down the entire admin page from the server because i tried to access it from another device and it opened with full administrator rights. Hovering over the pay and delete buttons in the user list, the URL exposed admin name and password.
I only lost 5500 sat, it's nothing, i did not want to hold any serious amount in the wallet while i familiarized myself with the script, so the thief got just spare change.
Yes, I just fixed it. Now script is safe. PM me, I'll give you your money back.