Legitimate script developers use specialized forums or GitHub. They almost never send cold emails to strangers.
Change your Roblox password (this signs you out of all other sessions).
Using a holiday tag in April (or any month outside of December) is a sign of a recycled bot template.