The person who built and released this might not have ever worked for your company, which might be why no one remembers building or releasing it.
So... worse than subterfuge? That being said it only listened on the local socket, so it's slightly less bad, and I don't want to get into the myriad of correct ways that original problem could have been solved, but lets just say that company doesn't exist anymore.