Well NPM isn't really your problem there, the registry its targeting is and that's a firewall & config change, no need to block npm.exe.