I have always assumed the vast majority of software meeting this description is malware. I don't know if I should feel silly or if it's a sensible assumption for end users to make.
Also, quick question: are Puppet and Ansible "factory produced" sysadmin?