diff --git a/package-lock.json b/package-lock.json
index b790d3a1a..0b0d0e029 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9003,9 +9003,9 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "9.0.2",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.0.2.tgz",
-      "integrity": "sha512-9z5FgIYd62LxcuCF2BAXnsEo059pGoPv/1E3XkrKBlB9kOQnJ6WSsyOjuGIcZfLAXseamyAif2J7yAVkWNdWzA==",
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-9.1.0.tgz",
+      "integrity": "sha512-PoOjBc3stYoaI2ehGC0hKQLoa18UYuSxxNZMm86f1y/mjokOvLrshbes7Fne2fk/4V1wR4s2BRdHpYHbp+PJcg==",
       "license": "ISC",
       "dependencies": {
         "@isaacs/string-locale-compare": "^1.1.0",
@@ -24869,12 +24869,12 @@
       }
     },
     "node_modules/libnpmpack": {
-      "version": "9.0.2",
-      "resolved": "https://registry.npmjs.org/libnpmpack/-/libnpmpack-9.0.2.tgz",
-      "integrity": "sha512-73E8bKOwi3Msw+QokqFhhKybFVjva2qGjuEDuu1qyRsQludfsoWL7ybbx/FHKsgVXaPGNhm8hW6XLByXYE/YnQ==",
+      "version": "9.0.3",
+      "resolved": "https://registry.npmjs.org/libnpmpack/-/libnpmpack-9.0.3.tgz",
+      "integrity": "sha512-XQetfcLAgOhzko1H9iC88nXEKr4RpX6d/T8buI9eSBc1Pd59DmEIvCNVynX5+sS/Qm1IrEN+8SwG4ZZVJAnBpQ==",
       "license": "ISC",
       "dependencies": {
-        "@npmcli/arborist": "^9.0.2",
+        "@npmcli/arborist": "^9.1.0",
         "@npmcli/run-script": "^9.0.1",
         "npm-package-arg": "^12.0.0",
         "pacote": "^21.0.0"
@@ -35584,7 +35584,7 @@
         "@dotcom-tool-kit/error": "^4.1.1",
         "@dotcom-tool-kit/package-json-hook": "^5.2.4",
         "@dotcom-tool-kit/state": "^4.3.2",
-        "libnpmpack": "^9.0.2",
+        "libnpmpack": "^9.0.3",
         "libnpmpublish": "^5.0.1",
         "pacote": "^12.0.3",
         "tar": "^7.4.3",
diff --git a/plugins/npm/package.json b/plugins/npm/package.json
index 2ac872086..8f0f43756 100644
--- a/plugins/npm/package.json
+++ b/plugins/npm/package.json
@@ -14,7 +14,7 @@
     "@dotcom-tool-kit/error": "^4.1.1",
     "@dotcom-tool-kit/package-json-hook": "^5.2.4",
     "@dotcom-tool-kit/state": "^4.3.2",
-    "libnpmpack": "^9.0.2",
+    "libnpmpack": "^9.0.3",
     "libnpmpublish": "^5.0.1",
     "pacote": "^12.0.3",
     "tar": "^7.4.3",