ioc: 2 new compromise candidate(s)

[brian93512]

Automated IOC compromise candidates generated from OSV ecosystem feeds for the last 24 hours.

Review each entry carefully:

• Does this read like a real supply-chain compromise or malicious publish, rather than an ordinary CVE?
• Is the version pinning exact and narrow enough?
• Is BLOCK the right action, or should this be downgraded to WARN?
• Is the reason clear enough for someone triaging a finding?

Close this PR if any candidate looks like a normal vulnerability that should stay in AS-004 / OSV instead of the manual blacklist.

[brian93512]

Closing this generated IOC candidate because compliance-trestle arbitrary file write is a normal vulnerability and should be covered through AS-004/OSV, not promoted into the manual AS-008 compromise blacklist.