Norway

This is covered by the Penal Code section 201, which penalize any person who with intent to commit a criminal act illicitly produces, procures, possesses or makes available to another person
a) a password or other information that may provide access to computerised information or a computer system, or
b) a computer program or something else that is particularly suitable as a means to commit criminal acts targeting computerised information or computer systems. The same penalty applies to any person who without intent to commit a criminal act possesses a self-replicating computer program and such possession is due to illicit production or procurement of the computer program.