As the newly appointed security head for the Python Package Index (PyPI), you must investigate a series of strange incidents where packages are being uploaded without proper authentication. Follow the clues left behind by the perpetrator and navigate the world of cybersecurity and trusted publishing to save the reputation of PyPI.