just to have this documented (we solved this via irc):
solution:
/os sqline add +0 /(?!Malena\b\s^[a-z].+$|malena$)[^a-z\d\n]*[Mm]+[^a-z\d\n]*[a4@]+[^a-z\d\n]*[Il|]+[^a-z\d\n]*[e3]+[^a-z\d\n]*n+[^a-z\d\n]*[a4@]+[^a-z\d\n]*/ Test
instead of space, you have to use \s
/(?!Malena\b ^[a-z].+$|malena$) ..
vs.
/(?!Malena\b\s^[a-z].+$|malena$) ..