I had a very similar experience: https://kaveh.page/blog/job-interview-scam I would never agree to run someone's code on my own machine that didn't come from a channel I initiated. The odd time I've ran someone else's code, ALWAYS USE A VM!
I'm a few years out of the loop, and would love a quick point in the right direction : )