v0.2.4

Malicious packages come first in reports: warnings at the top, a Malicious packages tile, a red header, and a per-package count. Adds examples/compromised-npm with six well-known compromised npm releases. See CHANGELOG.md.