Saying you're used by millions when you're a javascript library is a bit disingenuous. It's not like whoever happens to hit a website using your scripts is a user in the common sense of the word.
So while it can be argued that a percentage of those 117M/month are on automated scripts, even with a very conservative number saying of 1% of them being genuine installs this still leaves them at millions of installs per year. So yes, it's definitely not disingenuous to say it's used by millions.
With this, it's not that unlikely that one company (one customers) downloads the package thousands of times a week.
So even from a development point of view, not an end user, I don't think its a far stretch to 'being used by millions of developers, and they know it is being used'.
There are definitely many CI pipelines that download all packages every time they're triggered. For those pipelines you'd be looking at tens of installs per day (or more).