My general impression is that RMS' definition of malware is anything that is bad, by any measure, for the user.

Mal, bad, in the latin.