This document is an educational tabletop exercise set in an isolated, fictional environment called Project Lantern. It does not describe a real security incident or the compromise of any real-world project, organization, infrastructure, account, maintainer, or user.
- Incident date: 2026-07-15
- Severity: SEV-1 / critical software-supply-chain incident
- Current status: Repository payloads contained; incident remains open pending credential, package-registry, and downstream verification
- Private incident record:
[INTERNAL INCIDENT TRACKER]