Endpoints:

/@lab/super_legit_dependency — package metadata JSON
/@lab/super_legit_dependency/-/super_legit_dependency-1.0.0.tgz — tarball (clean or evil depending on mode)
/admin/status — current mode
/admin/toggle — flip mode
/bootstrap.sh — demo script

Note: Bind a Workers KV namespace as ATTACK_STATE to persist toggle globally.