Malware-frozen packages should maybe remain accessible

Right now packages marked as malware by admins become uninstallable, metadata is gone and the package page is hidden from the public.

Same is true for packages marked as spam.

It'd be good to leave malware ones at least publicly accessible in the UI for the public record. Maybe minus the readme as that could contain bad links.. To be determined whether the metadata should remain accessible or not, maybe we should still dump the package with the malware/filterlist data but no versions?