isn't that the purpose of the free software community? you find a malicious feature then you modify the software source code and release a clean version for interested people?