I wouldn't post a hack script like Ephi's on the AOT forums.
Anyway, my script is clean, and it's open-source. If you really feel that my script is compromising your security, you can always just open it up and see for yourself that there's no password-getting material in there. Or, you can just use it on an account with a bogus password. But, like I said, that's not even necessary.
Plus, if there was a hack in my script, someone would have posted about it by now.