Author here. I initially reported it as an imitation. A few days later I added evidence that it was malware.