Only if you know what you’re looking for. To go scour all the code and hope you stumble upon something malicious, might take a long while.
Then again, “malicious” is a broad term. Maybe they did something that messed it up, but that doesn’t necessarily mean it’s malicious (with bad intent).
But you could ask them what they did exactly, and then try to undo it all.