Yep! The craziest part is that GitHub and NPM don't seem to care.

EDIT: Finally got a response back from NPM and GitHub that they're investigating.