[homakov]

You can install the fix no matter what, it's innocent. They should have offered source code for their test app instead, but that's definitely not malicious.

[fourchette]

The test source code was made available here https://pastebin.com/2wd7GDTC.