"Name: W32/Bagle.ad@MM ... Note: The worm carries its source code (assembler) in its body, encrypted. When mass-mailing itself, the worm may also include a copy of the source code (within a ZIP archive, SOURCES.ZIP). It is not unlikely therefore that we will see further trivial variants based on this source."

People on the debian mailinglists are already joking whether the thing is DFSG-free.
Link to mcaffee's info