diff --git a/npm/.signature b/npm/.signature
index f502c5668..6c6eeb61e 100644
--- a/npm/.signature
+++ b/npm/.signature
@@ -1,6 +1,6 @@
 untrusted comment: verify with /etc/ports/contrib.pub
-RWSagIOpLGJF3w5UMeB6tqcxR/mUolxo8GVBNWITXTyfCo117Q7JSY29+ohg4dFTwhiw3YHDoJSCV+9zjisz+bF74VrKxqAgzw0=
-SHA256 (Pkgfile) = c5eb32f94178024aa5ad3d6e4336c26bd7a0c17490543ddf536fb954606468a9
+RWSagIOpLGJF30SBX2t5DOCVPrpz0hKTDKSS6saGeUwl8FDV9jE6LvC6ikbBJeTbN6lkZDWySCAAhS1B6x6jRcxgiFIS0Tskzw4=
+SHA256 (Pkgfile) = a89a997cc32d8f76494f686cd6dd581541acfa5a173aa467a9b8f115dd9c73d0
 SHA256 (.footprint) = dc74c21e37a1d3598613454424394274ebea0850c6942d7eaba4917b4c9a3256
-SHA256 (npm-9.1.2.tar.gz) = d4674ff534233078db939c8006137fb32e154da04df43c761e79bb49cd08085a
+SHA256 (npm-9.1.3.tar.gz) = 2dc4f7b6a596efdc48bc0925c4078b69bff0317ca045df010b5e5fed82551cd3
 SHA256 (destdir.patch) = b74ee19a9412025067c9d0b5aa5946a651a7bc0dedab4ae147b3e5d1fb569462
diff --git a/npm/Pkgfile b/npm/Pkgfile
index b4f244b46..5fafd4c09 100644
--- a/npm/Pkgfile
+++ b/npm/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on: nodejs
 
 name=npm
-version=9.1.2
+version=9.1.3
 release=1
 source=(https://github.com/npm/cli/archive/v$version/$name-$version.tar.gz
   destdir.patch)