Not everyone can commit code publicly to GitHub and publish packages to npmjs.com. We all benefit from those who do, no doubt. But many of us apply...
For further actions, you may consider blocking this person and/or reporting abuse
Have you seen npm enterprise?
I have! But it gets pricey at $16/mo/user.
Nexus is still better here as it’s free but it’ll you don’t want to deal with the hassle of hosting? npm orgs is only $7/mo/user