diff --git a/node_modules/npm-package-arg/lib/npa.js b/node_modules/npm-package-arg/lib/npa.js
index 6a3f07da929d8..8094b3e732cd9 100644
--- a/node_modules/npm-package-arg/lib/npa.js
+++ b/node_modules/npm-package-arg/lib/npa.js
@@ -380,6 +380,10 @@ function fromAlias (res, where) {
     throw new Error('aliases only work for registry deps')
   }
 
+  if (!subSpec.name) {
+    throw new Error('aliases must have a name')
+  }
+
   res.subSpec = subSpec
   res.registry = true
   res.type = 'alias'
diff --git a/node_modules/npm-package-arg/package.json b/node_modules/npm-package-arg/package.json
index c4cee1f928e89..d3f6fd7cf0a05 100644
--- a/node_modules/npm-package-arg/package.json
+++ b/node_modules/npm-package-arg/package.json
@@ -1,6 +1,6 @@
 {
   "name": "npm-package-arg",
-  "version": "11.0.2",
+  "version": "11.0.3",
   "description": "Parse the things that can be arguments to `npm install`",
   "main": "./lib/npa.js",
   "directories": {
@@ -18,23 +18,24 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^4.0.0",
-    "@npmcli/template-oss": "4.21.3",
+    "@npmcli/template-oss": "4.23.1",
     "tap": "^16.0.1"
   },
   "scripts": {
     "test": "tap",
     "snap": "tap",
     "npmclilint": "npmcli-lint",
-    "lint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\"",
-    "lintfix": "npm run lint -- --fix",
+    "lint": "npm run eslint",
+    "lintfix": "npm run eslint -- --fix",
     "posttest": "npm run lint",
     "postsnap": "npm run lintfix --",
     "postlint": "template-oss-check",
-    "template-oss-apply": "template-oss-apply --force"
+    "template-oss-apply": "template-oss-apply --force",
+    "eslint": "eslint \"**/*.{js,cjs,ts,mjs,jsx,tsx}\""
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/npm/npm-package-arg.git"
+    "url": "git+https://github.com/npm/npm-package-arg.git"
   },
   "author": "GitHub Inc.",
   "license": "ISC",
@@ -54,7 +55,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.21.3",
+    "version": "4.23.1",
     "publish": true
   }
 }
diff --git a/package-lock.json b/package-lock.json
index f55a1caae3d16..350e11693bb41 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -132,7 +132,7 @@
         "normalize-package-data": "^6.0.2",
         "npm-audit-report": "^5.0.0",
         "npm-install-checks": "^6.3.0",
-        "npm-package-arg": "^11.0.2",
+        "npm-package-arg": "^11.0.3",
         "npm-pick-manifest": "^9.1.0",
         "npm-profile": "^10.0.0",
         "npm-registry-fetch": "^17.1.0",
@@ -9506,9 +9506,9 @@
       }
     },
     "node_modules/npm-package-arg": {
-      "version": "11.0.2",
-      "resolved": "https://registry.npmjs.org/npm-package-arg/-/npm-package-arg-11.0.2.tgz",
-      "integrity": "sha512-IGN0IAwmhDJwy13Wc8k+4PEbTPhpJnMtfR53ZbOyjkvmEcLS4nCwp6mvMWjS5sUjeiW3mpx6cHmuhKEu9XmcQw==",
+      "version": "11.0.3",
+      "resolved": "https://registry.npmjs.org/npm-package-arg/-/npm-package-arg-11.0.3.tgz",
+      "integrity": "sha512-sHGJy8sOC1YraBywpzQlIKBE4pBbGbiF95U6Auspzyem956E0+FtDtsx1ZxlOJkQCZ1AFXAY/yuvtFYrOxF+Bw==",
       "inBundle": true,
       "license": "ISC",
       "dependencies": {
diff --git a/package.json b/package.json
index cb09b062eb2da..7422f46650160 100644
--- a/package.json
+++ b/package.json
@@ -97,7 +97,7 @@
     "normalize-package-data": "^6.0.2",
     "npm-audit-report": "^5.0.0",
     "npm-install-checks": "^6.3.0",
-    "npm-package-arg": "^11.0.2",
+    "npm-package-arg": "^11.0.3",
     "npm-pick-manifest": "^9.1.0",
     "npm-profile": "^10.0.0",
     "npm-registry-fetch": "^17.1.0",