Trusted Dispatch
I never thought publishing could be this dangerous.
As a PyPI package maintainer, you receive a suspicious package that contains an identity token for a trusted third-party service and a cryptic message indicating that someone is trying to hack into the PyPI repository. You must solve the mystery of who sent the package and stop the hacker before they gain full access to PyPI and compromise the security of users' packages.
