Yes, There's an npm Package Called @(-.-)/env and Some Others Like it

These packages have unconventional names and some of them do not follow naming guidelines. While not all of them pose a security risk, they could potentially cause confusion or break software development tooling.