diff --git a/npm/.footprint b/npm/.footprint
index 72d44968f..793547488 100644
--- a/npm/.footprint
+++ b/npm/.footprint
@@ -1279,10 +1279,6 @@ drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/minimatch/dist/mjs/
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/minimatch/package.json
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/minipass-collect/
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/minipass-collect/index.js
-drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/minipass-collect/node_modules/
-drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/minipass-collect/node_modules/minipass/
--rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/minipass-collect/node_modules/minipass/index.js
--rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/minipass-collect/node_modules/minipass/package.json
 -rw-r--r--	root/root	usr/lib/node_modules/npm/node_modules/minipass-collect/package.json
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/minipass-fetch/
 drwxr-xr-x	root/root	usr/lib/node_modules/npm/node_modules/minipass-fetch/lib/
diff --git a/npm/.signature b/npm/.signature
index 05dd1e147..2e32858b7 100644
--- a/npm/.signature
+++ b/npm/.signature
@@ -1,6 +1,6 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF35u7IGrtg7CMwy1l44YhHvYiGk8IiyQzmBIKTRRwODBRfSxvas+uBrafnra28J48snYnmbPNHn5OCvQ3ztYUfQU=
-SHA256 (Pkgfile) = 4f6f1c8698c0a995185e48005d7d570bed7c1489cc9018c6bc71675ab7c2b884
-SHA256 (.footprint) = 21b7ae8a88252a1a9bbe07f62d36429dfdd4338a0248d94c3642249aca64631c
-SHA256 (npm-10.2.4.tar.gz) = 5cab372dea5e7ec2a316ad366b1cadadb0f07af4c1d178a8fd44b6cde69d7209
+RWSagIOpLGJF3wQb5JkvDS4dcEfPAVwUeLeB6k2YmVH8SHq4bycV3e8B0tRIs30GbweKmkT/FLsY0EwNnmccHJHyEP01F3LoNwA=
+SHA256 (Pkgfile) = c41a03335e3494310866be0a120310fa1a5f1e0f4eda18aa04d29e1e8a5a435f
+SHA256 (.footprint) = 7fdbaedb1513c20306a5bf138df7fc386de35e78c12e8485ffb8a019e35fda1d
+SHA256 (npm-10.2.5.tar.gz) = 22353ef4563924f8d72d664c8e7f6dd7382b75824ad936e0fee194fd8a19b479
 SHA256 (destdir.patch) = b74ee19a9412025067c9d0b5aa5946a651a7bc0dedab4ae147b3e5d1fb569462
diff --git a/npm/Pkgfile b/npm/Pkgfile
index 76d35c1c0..bd0a79ab8 100644
--- a/npm/Pkgfile
+++ b/npm/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on: nodejs
 
 name=npm
-version=10.2.4
+version=10.2.5
 release=1
 source=(https://github.com/npm/cli/archive/v$version/$name-$version.tar.gz
   destdir.patch)