add 2025-09-8 malware attack packages upper bounds and ignore in .nsprc

add 2025-09-8 malware attack packages upper bounds and ignore in .nsprc #1901