Comment by pawelduda

Why not just bet heavily against and then inform maintainers? By just betting on it instead it makes you look like you, or someone you know planted the malware