Malware, spyware, stalkerware, credential harvesters and anything designed to deceive the person running it.
Products whose main purpose is to violate someone else's rights: piracy tools, scraped datasets of personal information, account-selling services.
Sexual content involving minors, content that promotes violence against people, and anything illegal where we operate.
Financial products that promise returns, and anything that needs a licence we cannot verify you hold.
Dual-use tools — security research, automation, scraping frameworks — are judged on their framing and their safeguards, and may be listed with conditions.