chore: update malware from upstream sources

[github-actions]

🤖 Automated Upstream Update: malware

This PR was automatically generated by the upstream monitoring system.

📊 Summary

• List: malware.txt
• New domains: 641245
• Removed domains: 0
• Sources checked: 2

📡 Source Details

Source 1: Malware

• URL: https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/refs/heads/master/Lists/Malware
• Upstream total: 43506 domains
• New domains: 185

Sample of new domains (showing 10 of 185):

133ab18de3.com
147c1e0584.com
2497may2024.com
47b48d19d4.com
48c5089fa7.com
4a75c45821.com
521c61e9f6.com
6c7000c257.com
6nmlkpk6irguvekw5.cfd
750040424c.com

Source 2: malicious.txt

• URL: https://media.githubusercontent.com/media/zachlagden/Pi-hole-Optimized-Blocklists/main/lists/malicious.txt
• Upstream total: 2706179 domains
• New domains: 641060

Sample of new domains (showing 10 of 641060):

0-0-0-0-0-0-0-0-0-0-0-0-0-33-0-0-0-0-0-0-0-0-0-0-0-0-0.info
0-0asia.com
0-2-0-7.casino
0-213008-google.ph
0-30-7.casino
0-6n10.sbs
0-9m4v.sbs
0-article.xyz
0-avn0.sbs
0-g-j-3.com

✅ Validation

• New domains are relevant to the {list_name} category
• No false positives identified
• Domains pass validation checks
• Build succeeds

🔄 Merge Policy

🔴 Manual review required - Changes exceed threshold (>100 domains)

---

This PR was created by the upstream monitoring workflow.
To disable upstream monitoring for this list, remove the upstream_sources section from config/lists.yml.