Reporting crimes is protected by law: see the whistleblower act. What is being hidden here is some dirty laundry.

Not all immoral, abusive and exploitative acts are illegal. In fact, most are not, because companies have whole legal departments dedicated to figuring out just how they can exploit the system and other people without getting punished legally.

...which should also be totally ok? It's a company, not a person, it shouldn't have any kind of protections except for libel/slander.

If the laundry is dirty, it should be aired. No one is better off for hiding it, many people are worse for hiding it.

And a real person, saying real(true) things about an unreal(corporation) person, should always be ok.

Which is why I used the term malfeasance, which covers acts that aren't illegal but still immoral or otherwise against the public interest.

And on other hand any bribes that is payments attached to such contracts should as well.