If there’s a company policy against, who knows, sending any company’s IP to a random third party known for shitting on both license terms and their own ToS, having your work marked like this is a big red flag. And since it “accidentally” happened to everyone, either you dismiss all the suspected bogus entries and let the rats in, or you have to carefully review everything.

It’s big trouble either way.