From the site mentioned by pr0 (and I quote):
"speaking of pennywize, i just cracked my first pennywize site
infact i found over 30 logins for it LOL"
Depressing, huh? LOL
I guess no script is fool (i.e. hack) proof. It'd be nice if there was an easy solution (other than monitoring the thousands of passwd hack boards)