Integrate check against OSSF Malicious Packages List

### Current Behavior

Currently we track Vulnerabilities of components. However, there are cases where malicious packages made it into repositories, either by taking over existing projects, abusing accounts or by typo-squatting or similar techniques, which might not be covered by typical vulnerability databases.

### Proposed Behavior

OpenSSF provides a project with known malicious packages at https://github.com/ossf/malicious-packages. Dependency-Track could integrate their data to identify and flag malicious packages.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

The issue names no files, tests, or entry points. Start by reviewing the repository structure and the linked OpenSSF Malicious Packages project to locate existing vulnerability-data integrations; done means the requested malicious-package data is integrated and packages can be identified and flagged.

Written by the indexing model from the issue text.