It's likely someone just ran npm ls -all