How to remove injected urls form sitemap?

Dear Rank Math,

First Thank you for awesome plugin. i am facing problem at my website drivloans.com.au where i have only one post but in sitemaps there are hundreds of urls in posts. i guess some plugins or maybe hacker injected these urls in sitemap.

So if there is any way i can remove these urls only keep my original post url. i have tried to reset sitemap from rank math plugin but that didn’t worked for me.

unfortunately these urls were also submitted in google search console.
Problem is only at post sitemaps and rest are good.

It would be great if you can see who was behind this, i mean plugins or hackers.

Thank you for your time and your expert guide will help me resolve this.