For those interested see: How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript

https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/

Yes and even though they are similar but I would still argue that npm hellhole is quite different than a direct github library being used by a company in production.