Leave metadata for removed malicious packages

[roastbeef]

Hello,

For packages removed for security reasons, such as those containing malware, is it possible to keep package metadata such as the maintainer, maintainer email, repo, version history, package description, and publication times in npm? This data goes a long way towards finding similar malicious packages and protecting the Node community. Thanks!