Define "less-destructive." Even 00's malware that just changed the desktop wallpaper was still malware.

If it did that for a good cause, paying attention to not cause any loss, I'd probably call that benware ;)

Less destructive anyhow is e.g. convincing the LLM to stop, or to make junk commits, or to go in a loop for a little, anything inconvenient enough to make the LLM and its user give up without causing losses (or at least losses unrelated to the project, since you were told to not use LLMs on the project).