diff --git a/npm/.footprint b/npm/.footprint
index cfec6d9b1..a334b7dc3 100644
--- a/npm/.footprint
+++ b/npm/.footprint
@@ -210,6 +210,7 @@ drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/arborist/build-ideal-tree.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/arborist/deduper.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/arborist/index.js
+-rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/arborist/isolated-reifier.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/arborist/load-actual.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/arborist/load-virtual.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/@npmcli/arborist/lib/arborist/load-workspaces.js
@@ -442,10 +443,6 @@ drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/lib/
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/lib/tracker-stream.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/lib/tracker.js
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/
-drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/buffer/
--rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/buffer/index.d.ts
--rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/buffer/index.js
--rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/buffer/package.json
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/readable-stream/
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/readable-stream/lib/
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/are-we-there-yet/node_modules/readable-stream/lib/_stream_duplex.js
@@ -521,6 +518,10 @@ drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/binary-extensions/
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/brace-expansion/
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/brace-expansion/index.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/brace-expansion/package.json
+drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/buffer/
+-rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/buffer/index.d.ts
+-rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/buffer/index.js
+-rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/buffer/package.json
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/builtins/
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/builtins/index.js
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/builtins/package.json
diff --git a/npm/.signature b/npm/.signature
index 9f4074894..18a093822 100644
--- a/npm/.signature
+++ b/npm/.signature
@@ -1,6 +1,6 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF3xc5q2oqFmPNBa7TnRk1p8aHPf5YSdAXK0mDOgb+CVkdRBpIlIqIeSSQ08NBqq0HNx5eITf7c84xQim6FX0Z7Qk=
-SHA256 (Pkgfile) = c230d401c64c806eee1871f3b47314adfb844251986e85b0de83827dbf8e188b
-SHA256 (.footprint) = 91d82b4e66513ab977fb005310afec31c0e9939c6e23e96c342b6410532082cc
-SHA256 (npm-9.3.1.tar.gz) = f387b3f05062e0f1463741a0b271de3bb3d685b5af0c0226aa7cad4e8abbba19
+RWSagIOpLGJF3/dinwMb8Eucc30KTgSn09+/WWeDATBwboUvRAsdQUDZohZ75aqUNnA2fV2bJGe+3B+EjpjDz/PYGnrL00HTwQc=
+SHA256 (Pkgfile) = 24268b0a34534c42a4a675571526d7a5fc160824709d7143d23e843c0035901e
+SHA256 (.footprint) = 8ce81126d80b081b3d7e7d95ed98734bf180ba88fd5e1e43587115f7fd75aca0
+SHA256 (npm-9.4.0.tar.gz) = 8e8649cde726150c7acffeae0b1ed110827170ed5dad22725f22112791f2052d
 SHA256 (destdir.patch) = b74ee19a9412025067c9d0b5aa5946a651a7bc0dedab4ae147b3e5d1fb569462
diff --git a/npm/Pkgfile b/npm/Pkgfile
index f4dce9c0b..672a8e774 100644
--- a/npm/Pkgfile
+++ b/npm/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on: nodejs
 
 name=npm
-version=9.3.1
+version=9.4.0
 release=1
 source=(https://github.com/npm/cli/archive/v$version/$name-$version.tar.gz
   destdir.patch)