add 2025-09-8 malware attack packages upper bounds and ignore in .nsprc (#971)

* add 2025-09-8 malware attack packages upper bounds and ignore in .nsprc

* update with more malicious packages

---------

Co-authored-by: Phil Varner <[email protected]>

Author: philvarner

.nsprc

@@ -1,2 +1,48 @@
 {
+  "1107280": {
+    "active": true,
+    "notes": "color-name security vulnerability in version 2.0.1",
+    "expiry": "2025-11-01"
+  },
+  "1107276": {
+    "active": true,
+    "notes": "color-string security vulnerability in version 2.1.1",
+    "expiry": "2025-11-01"
+  },
+  "1107278": {
+    "active": true,
+    "notes": "is-arrayish security vulnerability in version 0.3.3",
+    "expiry": "2025-11-01"
+  },
+  "1107292": {
+    "active": true,
+    "notes": "ansi-regex security vulnerability in version 6.2.1",
+    "expiry": "2025-11-01"
+  },
+  "1107296": {
+    "active": true,
+    "notes": "ansi-styles security vulnerability in version 6.2.2",
+    "expiry": "2025-11-01"
+  },
+  "1107295": {
+    "active": true,
+    "notes": "chalk security vulnerability in version 5.6.1",
+    "expiry": "2025-11-01"
+  },
+
+  "1107294": {
+    "active": true,
+    "notes": "strip-ansi security vulnerability in version 7.1.1",
+    "expiry": "2025-11-01"
+  },
+  "1107293": {
+    "active": true,
+    "notes": "supports-color security vulnerability in version 10.2.1",
+    "expiry": "2025-11-01"
+  },
+  "1107291": {
+    "active": true,
+    "notes": "wrap-ansi security vulnerability in version 9.0.1",
+    "expiry": "2025-11-01"
+  }
 }

package-lock.json

@@ -59,20 +59,32 @@
     "@mapbox/extent": "^0.4.0",
     "@opensearch-project/opensearch": "^2.13.0",
     "@redocly/cli": "^2.0.8",
+    "ansi-regex": "<6.2.1 || >6.2.1",
+    "ansi-styles": "<6.2.2 || >6.2.2",
+    "chalk": "<5.6.1 || >5.6.1",
+    "color-convert": "<3.1.1 || >3.1.1",
+    "color-name": "<2.0.1 || >2.0.1",
+    "color-string": "<2.1.1 || >2.1.1",
     "compression": "^1.8.1",
     "cors": "^2.8.5",
+    "debug": "<4.4.2 || >4.4.2",
     "express": "^4.21.2",
     "got": "^13.0",
     "http-errors": "^2.0.0",
+    "is-arrayish": "<0.3.3 || >0.3.3",
     "lodash-es": "^4.17.21",
     "memorystream": "^0.3.1",
     "morgan": "^1.10.1",
     "p-filter": "^4.1.0",
     "serverless-http": "^3.2.0",
+    "simple-swizzle": "<0.2.3 || >0.2.3",
+    "strip-ansi": "<7.1.1 || >7.1.1",
+    "supports-color": "<10.2.1 || >10.2.1",
     "through2": "^4.0.2",
     "ts-loader": "^9.5.4",
     "winston": "^3.17.0",
-    "xml2js": "0.6.2",
+    "wrap-ansi": "<9.0.1 || >9.0.1",
+    "xml2js": "^0.6.2",
     "zod": "^4.1.5"
   },
   "devDependencies": {