add 2025-09-8 malware attack packages upper bounds and ignore in .nsp…

add 2025-09-8 malware attack packages upper bounds and ignore in .nsp… #66