Returns every package flagged as malicious within the requested time window,
each with the justification recorded at detection time. Data is sourced from
the shared package cache and is not scoped to the API-key holder.

Specify the window with either days (look back N days) or an explicit
start/end pair — not both. Defaults to the last 7 days, and the
window may not exceed 7 days (requests for a wider span return 400).