Trojans paying for commits..?