I also received the same phishing email and I only have packages with a few thousand downloads per week.