The security discussion here is ridiculous, if the author wished to create his own trojan he could do so, he wouldn't need to infect his own work with someone else's creation. In other words it wouldn't show up on scanners.
That said, it's written in Java. If anyone is worried, just unpack the jar file, decompile, and look at the code.
Most likely there is no trojan.