it is not a bug with jagex accounts. the plugin you downloaded you pretty much opened the door to your account and said welcome in, dont take off your shoes.
you can use this to report the players and say what happened. but there wont be anything they can do. they cant change anythign to stop people downloading things to their computer that will compromise accounts.