When someone has a lua scripting name hack, type status or sb_status in the console once. Then wait for them to change their name again, then type it again after they swap their name. Now compare both outputs of that command. If a certain ID shows up twice with different names, there u go, u found him.
There was an old command back in the day where u spectate the guy hacking and type sm_ban @aim.
But not sure if that still works.
Nway. Use common logic and if u accidentally van someone, go to our sourcebans page and log in with ur forum info and urban them