GNU/FSF has a perhaps broader-than-average definition of malware, but the lists are thought-provoking to peruse.