Is he actually doing the work? Is just copying code from OSS projects and does not actually understand it? Not only will this cause legal liability, but when the team is under stress will he just disappear or be able to solve an issue?
He already lied once. Why not lie more?