As the sibling comment indicates, this is just an article from 2016 that deals with the original Kik/leftpad issue. NPM has since put policies in place to deal with unpublishing modules from the registry.