Actually it's even worst than that: right now the code creates pages in XWiki.Notifications.Code space with the username and sets the object value there.
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.
