diff --git a/package-lock.json b/package-lock.json
index ee99a5eaecd6b..f53c22cc0dd87 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -73,182 +73,7 @@
         "treeverse",
         "validate-npm-package-name",
         "which",
-        "write-file-atomic",
-        "@npmcli/disparity-colors",
-        "@npmcli/git",
-        "@npmcli/installed-package-contents",
-        "@npmcli/map-workspaces",
-        "@npmcli/metavuln-calculator",
-        "@npmcli/move-file",
-        "@npmcli/name-from-folder",
-        "@npmcli/node-gyp",
-        "@npmcli/promise-spawn",
-        "@tootallnate/once",
-        "agent-base",
-        "agentkeepalive",
-        "aggregate-error",
-        "ajv",
-        "ansi-regex",
-        "ansi-styles",
-        "aproba",
-        "are-we-there-yet",
-        "asap",
-        "asn1",
-        "assert-plus",
-        "asynckit",
-        "aws-sign2",
-        "aws4",
-        "balanced-match",
-        "bcrypt-pbkdf",
-        "bin-links",
-        "binary-extensions",
-        "brace-expansion",
-        "builtins",
-        "caseless",
-        "cidr-regex",
-        "clean-stack",
-        "clone",
-        "cmd-shim",
-        "code-point-at",
-        "color-convert",
-        "color-name",
-        "colors",
-        "combined-stream",
-        "common-ancestor-path",
-        "concat-map",
-        "console-control-strings",
-        "core-util-is",
-        "dashdash",
-        "debug",
-        "debuglog",
-        "defaults",
-        "delayed-stream",
-        "delegates",
-        "depd",
-        "dezalgo",
-        "diff",
-        "ecc-jsbn",
-        "emoji-regex",
-        "encoding",
-        "env-paths",
-        "err-code",
-        "extend",
-        "extsprintf",
-        "fast-deep-equal",
-        "fast-json-stable-stringify",
-        "forever-agent",
-        "form-data",
-        "fs-minipass",
-        "fs.realpath",
-        "function-bind",
-        "gauge",
-        "getpass",
-        "har-schema",
-        "har-validator",
-        "has",
-        "has-flag",
-        "has-unicode",
-        "http-cache-semantics",
-        "http-proxy-agent",
-        "http-signature",
-        "https-proxy-agent",
-        "humanize-ms",
-        "iconv-lite",
-        "ignore-walk",
-        "imurmurhash",
-        "indent-string",
-        "infer-owner",
-        "inflight",
-        "inherits",
-        "ip",
-        "ip-regex",
-        "is-core-module",
-        "is-fullwidth-code-point",
-        "is-lambda",
-        "is-typedarray",
-        "isarray",
-        "isexe",
-        "isstream",
-        "jsbn",
-        "json-schema",
-        "json-schema-traverse",
-        "json-stringify-nice",
-        "json-stringify-safe",
-        "jsonparse",
-        "jsprim",
-        "just-diff",
-        "just-diff-apply",
-        "lru-cache",
-        "mime-db",
-        "mime-types",
-        "minimatch",
-        "minipass-collect",
-        "minipass-fetch",
-        "minipass-flush",
-        "minipass-json-stream",
-        "minipass-sized",
-        "minizlib",
-        "mute-stream",
-        "normalize-package-data",
-        "npm-bundled",
-        "npm-install-checks",
-        "npm-normalize-package-bin",
-        "npm-packlist",
-        "number-is-nan",
-        "oauth-sign",
-        "object-assign",
-        "once",
-        "p-map",
-        "path-is-absolute",
-        "path-parse",
-        "performance-now",
-        "process-nextick-args",
-        "promise-all-reject-late",
-        "promise-call-limit",
-        "promise-inflight",
-        "promise-retry",
-        "promzard",
-        "psl",
-        "puka",
-        "punycode",
-        "qs",
-        "read-cmd-shim",
-        "readable-stream",
-        "request",
-        "resolve",
-        "retry",
-        "safe-buffer",
-        "safer-buffer",
-        "set-blocking",
-        "signal-exit",
-        "smart-buffer",
-        "socks",
-        "socks-proxy-agent",
-        "spdx-correct",
-        "spdx-exceptions",
-        "spdx-expression-parse",
-        "spdx-license-ids",
-        "sshpk",
-        "string_decoder",
-        "string-width",
-        "stringify-package",
-        "strip-ansi",
-        "supports-color",
-        "tunnel-agent",
-        "tweetnacl",
-        "typedarray-to-buffer",
-        "unique-filename",
-        "unique-slug",
-        "uri-js",
-        "util-deprecate",
-        "uuid",
-        "validate-npm-package-license",
-        "verror",
-        "walk-up-path",
-        "wcwidth",
-        "wide-align",
-        "wrappy",
-        "yallist"
+        "write-file-atomic"
       ],
       "license": "Artistic-2.0",
       "dependencies": {
@@ -311,7 +136,7 @@
         "rimraf": "^3.0.2",
         "semver": "^7.3.4",
         "ssri": "^8.0.1",
-        "tar": "^6.1.0",
+        "tar": "^6.2.1",
         "text-table": "~0.2.0",
         "tiny-relative-date": "^1.3.0",
         "treeverse": "^1.0.4",
@@ -9590,20 +9415,20 @@
       }
     },
     "node_modules/tar": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-6.1.0.tgz",
-      "integrity": "sha512-DUCttfhsnLCjwoDoFcI+B2iJgYa93vBnDUATYEeRx6sntCTdN01VnqsIuTlALXla/LWooNg0yEGeB+Y8WdFxGA==",
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz",
+      "integrity": "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==",
       "inBundle": true,
       "dependencies": {
         "chownr": "^2.0.0",
         "fs-minipass": "^2.0.0",
-        "minipass": "^3.0.0",
+        "minipass": "^5.0.0",
         "minizlib": "^2.1.1",
         "mkdirp": "^1.0.3",
         "yallist": "^4.0.0"
       },
       "engines": {
-        "node": ">= 10"
+        "node": ">=10"
       }
     },
     "node_modules/tar-fs": {
@@ -9654,6 +9479,15 @@
         "node": ">= 6"
       }
     },
+    "node_modules/tar/node_modules/minipass": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz",
+      "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==",
+      "inBundle": true,
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/tcompare": {
       "version": "3.0.4",
       "resolved": "https://registry.npmjs.org/tcompare/-/tcompare-3.0.4.tgz",
@@ -17742,16 +17576,23 @@
       }
     },
     "tar": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-6.1.0.tgz",
-      "integrity": "sha512-DUCttfhsnLCjwoDoFcI+B2iJgYa93vBnDUATYEeRx6sntCTdN01VnqsIuTlALXla/LWooNg0yEGeB+Y8WdFxGA==",
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz",
+      "integrity": "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==",
       "requires": {
         "chownr": "^2.0.0",
         "fs-minipass": "^2.0.0",
-        "minipass": "^3.0.0",
+        "minipass": "^5.0.0",
         "minizlib": "^2.1.1",
         "mkdirp": "^1.0.3",
         "yallist": "^4.0.0"
+      },
+      "dependencies": {
+        "minipass": {
+          "version": "5.0.0",
+          "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz",
+          "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ=="
+        }
       }
     },
     "tar-fs": {
diff --git a/package.json b/package.json
index 4af2d03946b83..f9207712dfc0d 100644
--- a/package.json
+++ b/package.json
@@ -101,7 +101,7 @@
     "rimraf": "^3.0.2",
     "semver": "^7.3.4",
     "ssri": "^8.0.1",
-    "tar": "^6.1.0",
+    "tar": "^6.2.1",
     "text-table": "~0.2.0",
     "tiny-relative-date": "^1.3.0",
     "treeverse": "^1.0.4",