I just had a look through the code (which is actually pretty simple) and there is no server or connection information in any of the files. Meaning that it can only connect to whatever servers you put in.
Unless someone has hacked the files and altered the code, or hacked into your WordPress account and change the settings.