I actually found out about this because the guy that created this project contacted me with respect to a package I had uploaded that contained my .npmrc. I was totally blown away, as I&#x27;d just followed instructions for creating an npm package I found online. When he contacted me -- prior to publishing this work, which leaves me in awe of his coolness -- panic ran through my veins, because I&#x27;m usually paranoid about this kind of thing. Through talking with him, I discovered that I&#x27;d published my .npmrc inadvertently, and I got pretty mad at npm that it was even possible. When the npm people contacted me (I&#x27;m assuming they had acted on ChALkeR&#x27;s contacting them), they were very receptive to the obvious feedback of checking for this kind of thing when publishing.