Where exactly is the "spyware" aspect of DASH located?

It's an open source project, so please, if possible, name of file and line of code...