I'm also seeing a "Report malware" button directly on the package page