I heard same news. Not surprising given the number of people MS has given it to for various reasons. Anyhow, best thing for anyone remotly connected with ReactOS is to just ignore it and pretend it doesnt exist. That way, there can be no accusations from MS that ROS is tainted.