This is the kind of message I am tempted to reply to in the following way:
"Sure thing. My hourly fee is 120€ per hour. The estimated time to complete this task is about a week (8*5) hours (the exact time may vary)."
Fortunately (or unfortunately) it is a joke and not a serious offer.
However, I have a question. Did you understand what I wrote to you have just read the message without understanding ?
"no, there's no "pre-done" code." means "go ahead and develop it".
Maybe there's a language issue here, because "I want code to create a malicious node." means "Please, somebody can develop it for me and send it?".
The answer is, of course, no.
There are too many assumptions about the attacker and the way the attack is performed to make the code useful to anyone (beside who's developing it). As a consequence, there's no interest in developing a general model and include it in ns-3. That's why there's no module performing what you're asking for, and whoever did it... probably he/she is not keen in sharing the work already done with people just willing to use it.
Happy coding.
T