If the machine can regenerate it, the old social contract doesn’t matter. That’s the same philosophical move you see in other domains: ingestion without consent, then “the output is new.”

2025-11-28 · Source: Pascal’s Substack · Field: Legal & Regulatory — Intellectual Property & Patents, Compliance & Risk Management, Regulatory Affairs & Government Relations · Depth: Advanced, long

Summary

Malus.sh is a provocative "service" that uses AI agents to convert open-source projects into functionally equivalent, "legally distinct" code, claiming to bypass open-source license obligations like copyleft and attribution. Developed by Dylan Ayrey and Mike Nolan, Malus.sh is presented as a satire and a real business, demonstrating the operational viability of AI-driven "clean-room laundering." This approach, inspired by historical clean-room methods, aims to reduce the cost and time of code replication from months to minutes. The initiative highlights how AI can undermine licensing ecosystems by making replication cheap, deniable, and scalable, posing a significant threat to open-source maintainers and the broader software supply chain.

Key takeaway

For CTOs evaluating software procurement and IP strategy, Malus.sh signals a critical shift: AI can industrialize "clean-room" code replication, potentially rendering traditional open-source licenses less enforceable. You should assess your organization's reliance on community-governed open-source projects and consider investing in machine-operable infrastructure for attribution and provenance to mitigate future risks from automated IP laundering.

Key insights

AI-driven "clean-room laundering" challenges traditional IP and open-source licensing by enabling cheap, deniable code replication.

Principles

• Copyright protects expression, not functionality.
• Economic friction historically enforced open-source licenses.
• LLM training on public code complicates "clean room" claims.

Method

Malus.sh uses one AI agent for functional specifications and a separate "clean" agent to write new code, followed by performance testing and vulnerability scanning.

In practice

• Consider AI for selective cloning of high-value dependencies.
• Explore AI for feature-parity clones to undercut competitors.
• Evaluate license-arbitrage as a procurement tactic.

Topics

• Malus.sh
• AI Code Generation
• Open-Source Licensing
• Intellectual Property Laundering
• Clean Room Methodology

Best for: CTO, Executive, Investor, Legal Professional, Policy Maker, AI Ethicist

Related on AIssential

• Can coding agents relicense open source through a “clean room” implementation of code? — AI-assisted code rewrites challenge traditional "clean room" definitions and open-source licensing compliance.
• MALUS - Clean Room as a Service — MALUS satirizes "clean room" development for license washing open source projects via AI.
• AI And The Ship of Theseus — Cheap code generation and AI challenge traditional software licensing and copyright, enabling re-implementations from test suites.
• ‘Manners for machines’: how new rules could stop AI scrapers destroying the internet — CC Signals offer a voluntary, machine-readable framework for creators to manage AI access and use of their online content.
• Penguin v. OpenAI: AI-assisted production of market substitutes in the very formats that already plague children’s publishing (fake titles, lookalike covers, rapid self-publishing). — AI models reproducing copyrighted content on demand can constitute actionable copyright infringement.
• Why Europe's latest Meta ruling matters: International approaches to AI legislation are diverging. — Europe and the US are diverging on AI legislation, particularly regarding platform compensation for content extraction.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Pascal’s Substack.