Background
There was a need to regularly run npm update to keep dependency packages up to date, but doing it manually was cumbersome, so...
For further actions, you may consider blocking this person and/or reporting abuse
great post about npm and github actions :)