AI Satire Tool Clones Open Source Legally

TL;DR

Malus Tool Launched: Malus.sh uses AI for clean room clones of open source software, dodging license terms like attribution and copyleft.
$0.01 per KB Pricing: The functional satire LLC charges via Stripe and runs scans for functionality and vulnerabilities.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)[[2]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright)
Open Source Threat: Highlights AI's cheap recreation of code, exploiting unpaid labor and skipping community maintenance.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

The story at a glance

Malus.sh, created by Mike Nolan and Dylan Ayrey, is a satirical yet operational AI service that recreates open source projects via clean room methods to strip license obligations. The article, published after their FOSDEM 2026 talk, details how it works, its legal basis from 1980s precedents, and real-world examples like a disputed chardet library rewrite. This is reported now amid rising AI use in software development threatening open source sustainability.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

Key points

Malus ingests software, has one AI agent create specs, and another generate new code, mimicking human clean room reverse engineering upheld in 1980s case law.
Site pitches "liberation from open source license obligations" with no attribution or copyleft, charging $0.01 per KB of data including dependencies.
Originated from FOSDEM 2026 talk; Nolan says it works and earns "probably hundreds" of dollars to prove the threat is real.
Example: Dan Blanchard used Claude AI to rewrite chardet from LGPL to MIT; original author called it derivative, leading to license change to 0BSD amid backlash.
Critics like Mike McQuaid argue AI clones create technical debt by skipping ongoing patches and expertise.
Legal expert Meredith Rose notes AI makes clean rooms "wild" by removing human labor calculus, though technically allowed.

Details and context

Malus builds on the 1982 clean room method used by Columbia Data Products to clone IBM's BIOS without copying code, enabling competition in early PCs. One isolated team documented requirements; a separate team built from those specs. AI now automates this cheaply—one agent for specs, another for code—potentially at days instead of months.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

Nolan, who researches open source economics and works at the UN, aims to provoke thought on exploitation: developers labor unpaid while companies profit, ignoring ethics like supply chain use in weapons. The tool scans outputs for vulnerabilities and functionality but lacks long-term community support.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

Real cases like chardet show it's happening; Blanchard admitted AI training data exposure but claimed originality. Community responses vary: some see AI rewrites as inevitable, others decry ethics.

Key quotes

“Our proprietary AI robots independently recreate any open source project from scratch. The result? Legally distinct code with corporate-friendly licensing. No attribution. No copyleft. No problems.” — Malus.sh site.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

“It works.” — Mike Nolan, Malus co-creator, to 404 Media.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

“A ‘clean room’ reimplementation fucks all of that... It’s basically just a fork where nobody knows how the code works.” — Mike McQuaid, Homebrew developer, to 404 Media.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

Why it matters

AI clean room tools like Malus expose how open source relies on goodwill amid corporate exploitation, risking collapse of free software maintenance. Developers and users face clones without security updates or credits, while companies gain proprietary versions cheaply. Watch for court rulings on AI outputs or open source license reforms, though no cases test this yet.

FAQ

Q: How does Malus.sh perform clean room cloning?

A: It uses one AI agent to create high-level specifications from input code, then a separate agent generates new code from those specs, isolating the process to avoid direct copying. The output undergoes functionality and vulnerability scans. This mirrors 1980s human methods validated by courts.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

Q: What licenses does Malus target?

A: It aims to bypass copyleft licenses requiring derivatives stay open and attribution clauses crediting originals. Users get code for corporate-friendly terms without those obligations. Copyleft ensures modifications remain free to share.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

Q: Is Malus just satire or real?

A: It's satirical from a FOSDEM talk but fully functional as an LLC using Stripe for payments and earning revenue. Nolan built it real to show open source workers the economic risks they dismiss. It processes paid requests as advertised.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

Q: What real example shows this in practice?

A: Dan Blanchard rewrote chardet library using Claude AI, changing from LGPL to MIT; original author Mark Pilgrim objected over similarity despite low code overlap. Backlash prompted a switch to 0BSD license.[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)

[[1]](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/)