We found the issue with one of our message broker systems and fixed this by removing the malicious message there. We still investigating in how to prevent such cases and strengthen the system against it.