I have a npm package, the name was pretty unique.
I was searching the name of my package on npm when I noticed there were 2 results. One was mine and the other one has the README stolen from me with all the entries of my package name changed to their package name. (they did not change the capitalized entries)

There’s now 3 results with the other two having stolen README, and also changing all entries of my package name to their package name without touching the capitalized ones. They even changed my contact email I left, which includes my package name, but they only changed the part where my package name is present. (my website in the email address was left untouched)

Has anyone got similar experience? How should I deal with this?