I found it out, it was Ocelotus' Renderman v4. It had a backdoor which allowed anyone to use eval. Case closed. This means it was most likely DragonoidSlayer who did this since he was the only one at my server.