Could we maybe clear up the title (even though the original article gets it wrong too)?

A threat about a bomb was never made by anyone. It was a suspicious package.

Here is the official statement: https://twitter.com/defcon/status/1690740778124115969