diff --git a/node_modules/.gitignore b/node_modules/.gitignore
index e68483b4b2e4..2486f1b5b4d8 100644
--- a/node_modules/.gitignore
+++ b/node_modules/.gitignore
@@ -219,6 +219,7 @@ package-lock.json
 /request-promise-core
 /request-promise-native
 /require-directory
+/require-from-string
 /require-inject
 /require-main-filename
 /resolve-from
diff --git a/package-lock.json b/package-lock.json
index 479a0b4ba182..648cecdf65f7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -303,6 +303,7 @@
         "readable-stream",
         "regexpp",
         "request",
+        "require-from-string",
         "resolve",
         "resolve-from",
         "retry",
@@ -402,7 +403,7 @@
         "npm-user-validate": "^1.0.1",
         "npmlog": "~4.1.2",
         "opener": "^1.5.2",
-        "pacote": "^11.2.1",
+        "pacote": "^11.2.3",
         "parse-conflict-json": "^1.1.1",
         "qrcode-terminal": "^0.12.0",
         "read": "~1.0.7",
diff --git a/package.json b/package.json
index 3b79d218fc2a..61a33fc1ec45 100644
--- a/package.json
+++ b/package.json
@@ -90,7 +90,7 @@
     "npm-user-validate": "^1.0.1",
     "npmlog": "~4.1.2",
     "opener": "^1.5.2",
-    "pacote": "^11.2.1",
+    "pacote": "^11.2.3",
     "parse-conflict-json": "^1.1.1",
     "qrcode-terminal": "^0.12.0",
     "read": "~1.0.7",