Trusted Publisher Escape

You are a PyPI package maintainer, and your job is to make sure that packages are published securely. Your identity has been stolen, and the attacker has published malicious packages on PyPI. You need to escape from the hacker's lair and track down the source of the attack in order to clear your name and save PyPI. Solve puzzles, avoid traps, and use your cybersecurity skills to survive!