That would be instantly called out on this forum. Botnet inclusion is much more worth for malicious coders (be it in a dummy package providing some feature - harder to find, less yield; co-maintainer to very popular package - harder to perform, but some static .so inclusion that fixes a bug included previously should work easily). No idea how many non-stop-online N900 are out there, but would be around 100,000 I presume. Not bad for a bot-net (a mobile one at that)