Story time: a few years ago I got a call out of the blue from some guy claiming to be a lawyer working for my old company. He named a specific product that I'd built for them a couple years prior and said they're embroiled in this huge lawsuit over it and that I defrauded them, they're coming after me personally for millions in damages, I'll never work in the industry again, etc.

I got off the phone scared shitless, barely slept that night googling my legal liability and searching for lawyers.

Someone I know suggested it might be a prank, so I called the legal team at the company and they had no clue what I was talking about. It was a troll. Never did quite figure out who was behind it, but the moral of the story is people can be mean sometimes and troll you just for kicks.

If they are a troll or a scammer, how would they know about those code reviews? No way they could randomly come up with something so specific.