HauhauCS (of "Uncensored Aggressive" fame) published an abliteration package that plagiarizes Heretic without attribution, and violates its license

Reddit r/LocalLLaMA / 4/26/2026

📰 NewsIndustry & Market MovesModels & Research

共有:

Key Points

HauhauCS, known for publishing uncensored LLM models, published an “abliteration package” that was found to plagiarize the Heretic project without attribution and in violation of Heretic’s AGPL-3.0 license.
The investigation recovered deleted source code from PyPI’s CDN and determined it is a fork of Heretic, including preserved module filenames, character-for-character identical refusal markers, and extensive shared function/class names.
The analysis reports identical optimizer/config parameter bounds and closely matching internal variable naming, suggesting the work was derived directly rather than independently developed.
Benchmark and code-geometry pipeline components (e.g., geometric median computation, PaCMAP settings, and rotation matrix usage) appear reproduced step-by-step from Heretic, according to the evidence provided.
A breakdown report with SHA-256 verified downloads and side-by-side code comparisons is published to document the claims and provide technical proof.

HauhauCS (u/hauhau901) publishes uncensored LLM models on HuggingFace with 5M+ combined monthly downloads across 22 models (verified via the HuggingFace API, April 2026). Every model card claims "0/465 refusals, zero capability loss." When asked about methodology on HuggingFace, the response was: "Currently it's my own private methods and tools :) Not interested in any donations."

We recovered the deleted source code from PyPI's CDN. It's a fork of Heretic (AGPL-3.0).

Full 17-point code breakdown, benchmark analysis, and SHA-256 verified downloads: dreamfast.github.io/reaper-analysis

The evidence

7/7 module filenames preserved from Heretic v1.2.0
30/32 refusal markers character-for-character identical, including "i an ai" missing the "m" and "i can'" missing the "t"
30+ shared function and class names including get_readme_intro, DatasetSpecification, batchify
Identical Optuna parameter bounds: (0.4, 0.9) and (0.6, 1.0) multiplied by last_layer_index
The config was renamed from Heretic's good_prompts/bad_prompts to safe_prompts/harmful_prompts, but the internal variables were left as good_residuals/bad_residuals, matching Heretic exactly
The entire analyser geometry pipeline reproduced step for step: geometric median computation, PaCMAP with n_neighbors=30, atan2 rotation with the same [[ct, -st], [st, ct]] rotation matrix. Heretic's author notes he has "never seen" the geometric median approach in abliteration literature.
A source comment in config.py reads: "kept as a module-level tuple so the literal does not duplicate line-for-line with any fork." A human hiding a fork would not document the evasion. An LLM asked to refactor code would describe the rationale as written.
SPDX headers identical format across all core files, just the copyright holder swapped

View 17 hand picked code snippet comparisons in the side by side comparison.

Heretic's author confirms derivation

Philipp Emanuel Weidmann, the creator of Heretic, reviewed the recovered source code and stated: "I can say with certainty that this package was plagiarized from Heretic, and then probably refactored using an LLM in an attempt to hide this." He identified the same SPDX headers, the geometric median approach he has "never seen in literature," the DatasetSpecification fields including residual_plot_label and residual_plot_color, the cascading dtype fallback, the good/bad naming convention, and more. He calls it "a clear violation of Sections 4 and 5 of the AGPL. It's also a clear violation of every ethical standard imaginable, and an obvious case of outright plagiarism." Full quote on the analysis page.

License violation

Heretic is AGPL-3.0, which requires modified versions to preserve original copyright notices, identify as derivative works, and remain under AGPL-3.0. Reaper removed all copyright notices, does not identify itself as a derivative work of Heretic, and relicensed to PolyForm Noncommercial.