Couldn't garry blacklist this module? I thought that was pretty much what VAC was for on garry's mod.
Eventually, but while he hasn't it's free game. For an example of his reaction time- look at CVar3, the only source of bypasses for the majority of the public at the moment.
CVar3 is a bad example. It was released with positive intentions and was only manipulated to be used as a bypasser. Garry couldn't blacklist CVar3 even if he wanted to because in the process he would ban legitimate players, not just hackers.
Since this no spread is intended for malicious use Garry could easily blacklist it without worrying about banning any legitimate players.
Just gonna go ahead and warn you before any flaming starts.
Flaming here is now equal to getting banned.