We can't tell you whether they can/can't see/do anything because 1. we aren't looking at source code, 2. spreading any malicious files on discord isn't helping anyone but this alleged malicious actor, and 3. there are a lot of suggestions that have been sent, so I'd start with what should be priority number 1 of informing the PC owner of what has possibly taken place on what sounds like a work device and not just a random personal one.