@Chris - No offense taken. I debated for awhile on whether I would publish anything concerning this plugin and I concluded that it was better for the general populous to know about it instead of not saying anything. Your points are valid concerning the number of un-updated plugins in the repository but I would argue, how are end users supposed to know about those? Although there is a warning on plugins that have not been updated in 2 years, there are plugins from 2 years ago that work perfectly with the latest release of WordPress and who's code is fine. I'm currently working on a guide on how to choose plugins on the repository which I hope will help people.

He did submit the plugin to the WordPress plugin repository and as of yet, I can't find it. I've sent an email to the folks who review the repository to see if they have come across it and whether it was accepted or denied.

By the way, I never called the plugin evil, that's the name of it lol. In my opinion, I think you're doing everyone a disservice by not calling people out on questionable plugins you come across. By no means does that mean insulting people but the general public ought to know which plugins to potentially stay away from just as much as they should have insight into which ones to choose. Also, if we can help turn those questionable plugins into non-questionable plugins, everyone wins. I also think that it's healthy to have a conversation on whether a plugin is questionable or not, which was another aspect of this post. As Ipstenu pointed out, there are some legitimates uses for this plugin, namely for researching purposes. I have no problem with a plugin that does that as long as it's marketed for that use. If people download it and use it for malicious purposes, there's nothing I can do about that.

With all that said, there is one thing I'll do differently in the future when bringing up questionable plugins. I won't engage in a discussion unless it's hosted on the WP.org repository.