There are actually two pop-up banners that come with this plugin–one on the Plugin page and one on the Themes page. The one on the Plugins page can be dismissed permanently. The one on the Themes page cannot be dismissed–only closed out of via an x. That message does indeed come back every time you refresh the page. That _is_ spam.
I also deinstalled this plugin for the reason the above poster gave, and find your response here reprehensible. If people can’t trust your words with something they can very easily confirm for themselves, they certainly aren’t going to trust your code to be clean and free of malware/exploits.
P.S. Leaving a five-star review for your own plugin is bad form, and really sketchy too.
