Yes, There’s an npm Package Called @(-.-)/env and Some Others Like it
These packages have unconventional names and some of them do not follow naming guidelines. While not all of them pose a security risk, they could potentially cause confusion or break software development tooling.