They supposedly took over the npm packages[0,1], not the github.com repos. npm is a system where you push archives as package versions, it doesn't do its own pu

They supposedly took over the npm packages[0,1], not the github.com repos. npm is a system where you push archives as package versions, it doesn't do its own pull from a github repo or otherwise. To add, unused/squatted npm package names regularly get reassigned[2]. 0: https://www.npmjs.com/package/colors https://www.npmjs.com/package/colors 1: https://www.npmjs.com/package/faker https://www.npmjs.com/package/faker 2: https://docs.npmjs.com/policies/disputes#definitions https://docs.npmjs.com/policies/disputes#definitions