Corporate espionage targeting an open-source project?