I just got an email for a npm package that I made, because it got added to some very obvious AI package search clone thingy.