[Feature]: Add vulnerability report to malicious packages

[homanp]

What would you like?

If the verification deems a vulnerability is verified we should create a report similar to the following:

module-federation-security-disclosure.md

Why?

Later on we would want to send this report to maintainers of the packages.