> the text of the email reads like one you'd get from npm in the tone, format and lack of obvious spelling & grammatical errors.

As a university professor whose email address is public, I've been regularly getting phishing emails for years. Many of these are targeted and devoid of any spelling or grammatical errors. I am sure generative AI is making writing these emails easier but by how much is unknown.