Thousands of NPM accounts use email addresses with expired domains (therecord.media)

Basically, npm should do the house keeping on this one