Yes, yes we do.

Open source malware is important for the security of the targeted systems.

If unnamed corporate software monopoly discovers hole via malware, and doesn't release a notification (let alone patch), everyone else can discover that hole as well.

If all malware writers were so inclined to help the public protect against their malware.

Um. Ur wrong. It's relevant for everyone not Visa, MasterCard, American Express, Discover. TJX et al have way heavy PCI fines.

Let's all rush those fuckers and see who wins.