Since the developer(s) is/are anonymous - why would they need any elaborate way of telling people this? They could just state that they consider the code compromised and advise not to use it anymore.