Good news template

Which version of Helix are you using?
It appears you haven't updated Helix Ultimate, and an attacker exploited a vulnerability discovered before version 2.2.7 to inject attacks into your site. What you need to do as soon as possible is first create a backup (for analysis), check if a new superuser has been created (if so, delete it), update all of Helix, SP Page Builder, Joomla, and any other extensions you might be using to the latest versions, and change your administrator password. Change the `$secret` in `configuration.php` to a 32-character alphanumeric key (services like Avast can help you generate these keys). Change your FTP password and your database password.

If you have a healthy backup, restore from it and perform the updates as soon as possible.

If you don't have a backup, update your production backup and clean up the menu items from the database. What you need to look for in the menu table is <script>............the entire script</script>"> and delete

IMPORTANT: Password, username, and key changes are made after the cleanup is complete.
You can read the list of vulnerabilities and their solutions here mysites.guru/blog/ . It's not just Helix; perhaps some extension you use is vulnerable.
You can also install the extension github.com/zkrana/joomla-security-scanner to help with cleaning, but before deleting everything it lists, verify that it is a malicious file or folder because it can give false positives.

Regards

If you wish, we can help you with that problem.