// publisher campaign · npm

jiulingyun

All caught packages published by the jiulingyun account on npm, plus the author + maintainer info the registry currently exposes. Use this view to pivot: shared emails / names across packages are strong evidence of a single attacker behind multiple throwaway handles.