CWE-507: Trojan Horse
The product appears to contain benign or useful functionality, but it also contains code that is hidden from normal operation that violates the intended security policy of the user or the system administrator.
A kind of CWE-506 Embedded Malicious Code.
From the CWE List. © The MITRE Corporation.