I know someone who had his Javascript library, hosted on his site, imported into Facebook's layout by some Facebook dev. He put a redirect into the Javascript

I know someone who had his Javascript library, hosted on his site, imported into Facebook's layout by some Facebook dev. He put a redirect into the Javascript to his own website, and Facebook employees started calling him about 5 minutes later.