Im not in any way affiliated with the plugin, but those spammy emails could have just been bots filling out your contact form. Theres no way installing a plugin would give your email address to any specific person. You could have just used the captcha field or other methods to prevent the spam emails.
So please, before you poorly rate a free, well developed plugin, reach out for help or do a little research.