In reply to Alex Mustin.

This makes me wonder how many others plugins there might be on .org containing intentionally malicious code. Are there any third parties that scan the directory for these things?