chore: update malware from upstream sources

[github-actions]

🤖 Automated Upstream Update: malware

This PR was automatically generated by the upstream monitoring system.

📊 Summary

• List: malware.txt
• New domains: 871706
• Removed domains: 0
• Sources checked: 2

📡 Source Details

Source 1: Malware

• URL: https://raw.githubusercontent.com/ShadowWhisperer/BlockLists/refs/heads/master/Lists/Malware
• Upstream total: 43863 domains
• New domains: 525

Sample of new domains (showing 10 of 525):

0704a6c22b.com
0b8b518f70.com
0e091251b2.com
133ab18de3.com
1355768492.com
147c1e0584.com
14k6z61kqkmtcb3u1.cfd
1816460cba.com
1b8d56a9a3.com
223f211e77.com

Source 2: malicious.txt

• URL: https://media.githubusercontent.com/media/zachlagden/Pi-hole-Optimized-Blocklists/main/lists/malicious.txt
• Upstream total: 2312904 domains
• New domains: 871181

Sample of new domains (showing 10 of 871181):

0-0-0-0-0-0-0-0-0-0-0-0-0-18-0-0-0-0-0-0-0-0-0-0-0-0-0.info
0-0-0-0-0-0-0-0-0-0-0-0-0-33-0-0-0-0-0-0-0-0-0-0-0-0-0.info
0-0asia.com
0-0x.xyz
0-101.com
0-2-0-7.casino
0-213008-google.ph
0-article.xyz
0-by-1.info
0-g-j-3.com

✅ Validation

• New domains are relevant to the {list_name} category
• No false positives identified
• Domains pass validation checks
• Build succeeds

🔄 Merge Policy

🔴 Manual review required - Changes exceed threshold (>100 domains)

---

This PR was created by the upstream monitoring workflow.
To disable upstream monitoring for this list, remove the upstream_sources section from config/lists.yml.