If you're seeing it inside the actual Puppet .rpm file, the only thing I can think is that the particular VM image they built stuff on had the binary...somewhere and the build process automatically picked it up somehow, but I don't know how it would have.