http://www.clock.co.uk/blog/how-to-create-a-private-npmjs-re...
Some people have figured out how to create a private npm repository that isn't just a complete duplicate of the npmjs repository. I don't know how common this approach is though. You can read this SO question for more information: http://stackoverflow.com/questions/14609131/can-i-run-a-priv...
Also, note that even if these download numbers are real, all they indicate is that certain tools that developers have built are very popular with other developers. Developers don't just build tools for other developers. They have to actually use these tools to build stuff that other humans can use. Your competition is with developers within your locality who are trying to prove that they are best-suited towards meeting business needs and building stuff.
All these npm packages aren't your rivals, they're free tools to help you meet business tools (Although whether you actually need to use those tools is another question entirely).