SQL Injection on tags. How to repair?

Hi folks.
A few weeks after upgrading to Mautic 2.13.0 my installation was attacked with SQL Injection.

O got about 255 tags lead_tags with SQL parts.
I can see them in the table (https://www.dropbox.com/s/2aluj6imvv6hb4v/mautic-sqlinjection-1.jpg?dl=0) and also in the autocomplete field (https://www.dropbox.com/s/b3txugcqq8xqbkq/mautic-sql-injection-2.jpg?dl=0).

Is there a way to safely delete these tags?
I already updated to 2.13.1 but they are still there.

Thank you.