Admin tasks are public in phabricator so it would be trivial to review chores and place malware in the chore's scope