Definitely sounds like spear phishing targeting you specifically.

Kudos to you for owning up to it.

As others have said, it's the kind of thing that could happen to anyone, unfortunately.

I also received the same phishing email and I only have packages with a few thousand downloads per week.