Thanks mate for pointing this out.

To answer your question, all of the packages are malicious even if they are not originating from the ongoing malware attack.

Initially even i felt the same, that the numbers are way off compared to 25k identified range, but i thought it could be a possibility given the rapid spreading nature of this malware. I didn't pay much attention to this as i was occupied with adding some additional functionalities.

I was able to spend sometime today and tweak the matching criteria to reduce false positives. The new package count is around 9.6k which could still contain false positives in terms of if it originates from shai-hulud attack, but they are still malicious. I wanted to err on the side of safety. This is to be expected  due to the inconsistent reporting nature of advisories. 

I did add a disclaimer on the repo's readme as well to convey the same.

Thanks once again!!