Does anyone know the best way to get in touch with NPM and/or GitHub moderation? Regardless of whether this unsourced statement is actually true in any way, wha

Does anyone know the best way to get in touch with NPM and/or GitHub moderation? Regardless of whether this unsourced statement is actually true in any way, what happened here is a trivial NPM ToS violation and the fact that it happened with such intent should be grounds for nuking the account. NPM does not allow any form of malicious code. I’m all for the fact that I’m not owed anything at all from open source devs, but the open source community can’t survive unless we both adhere to and hold others to adhere to the base ground rule of not sneaking malware into packages. Plus, it’s probably against just about any ToS on the planet, and probably illegal.