That would be the "terms under which they uploaded it" NPM doesn't appear to have a "default license" though, so that would be "no license", therefore normal c

That would be the "terms under which they uploaded it" NPM doesn't appear to have a "default license" though, so that would be "no license", therefore normal copyright law would seem to apply, and you can't make a copy of it, and more than you can copy a picture on a billboard or a blog post or whatever.