Add clarification for intentionally malicious code

Author: carols10cents

app/templates/security.hbs

@@ -17,6 +17,9 @@
     owners and their specific policies. Commonly, projects include a file named <code>SECURITY.md</code> that contains the
     crate's security policies and procedures.</p>
 
+  <p>Intentionally malicious code is against <LinkTo @route="policies">crates.io's usage policies; please report crates violating
+    these policies to <a href="mailto:[email protected]">[email protected]</a>.</p>
+
   <h2 id='rustsec'>Rustsec Security Advisory Database for receiving security updates</h2>
 
   <p>The <a href="https://rustsec.org/">Rustsec Security Advisory Database</a> maintains advisories about vulnerabilities in