So I suppose if I were to put out for bid a dummy project that was specified to contain numerous valuable features I might very well find myself in possession of software that has basically been laundered through and offshore development office - and I might then, never knowing anything about the tainted origins of said software - incorporate it into my own product which may very well be in direct competition with the company that actually paid for its development.
Well, to counter that one might simply hold out the prospect of "phase 2". I suspect that would be a minor risk compared to the potential (ill-gotten) rewards.