The Landscape of Malicious Open Source Packages: 2025 Mid‑Year Threat Report