diff --git a/package-lock.json b/package-lock.json
index c2f8276d0f..12d73658c5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,6 +7,9 @@
     "": {
       "name": "nativescript",
       "version": "9.0.6",
+      "bundleDependencies": [
+        "universal-analytics"
+      ],
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -55,7 +58,7 @@
         "simple-git": "3.30.0",
         "simple-plist": "1.4.0",
         "source-map": "0.7.6",
-        "tar": "7.5.9",
+        "tar": "7.5.19",
         "ts-morph": "25.0.1",
         "tunnel": "0.0.6",
         "typescript": "5.7.3",
@@ -93,7 +96,7 @@
         "@types/shelljs": "^0.8.11",
         "@types/sinon": "^17.0.3",
         "@types/tabtab": "^3.0.2",
-        "@types/tar": "6.1.13",
+        "@types/tar": "7.0.87",
         "@types/tunnel": "0.0.7",
         "@types/universal-analytics": "0.4.8",
         "@types/uuid": "^10.0.0",
@@ -1851,24 +1854,14 @@
       }
     },
     "node_modules/@types/tar": {
-      "version": "6.1.13",
-      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-6.1.13.tgz",
-      "integrity": "sha512-IznnlmU5f4WcGTh2ltRu/Ijpmk8wiWXfF0VA4s+HPjHZgvFggk1YaIkbo5krX/zUCzWF8N/l4+W/LNxnvAJ8nw==",
+      "version": "7.0.87",
+      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-7.0.87.tgz",
+      "integrity": "sha512-3IxNBV8LeY5oi2ZFpvAhOtW1+mHswkzM7BuisVrwJgPv67GBO2rkLPQlEKtzfHuLdhDDczhkCZeT+RuizMay4A==",
+      "deprecated": "This is a stub types definition. tar provides its own type definitions, so you do not need this installed.",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/node": "*",
-        "minipass": "^4.0.0"
-      }
-    },
-    "node_modules/@types/tar/node_modules/minipass": {
-      "version": "4.2.8",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-4.2.8.tgz",
-      "integrity": "sha512-fNzuVyifolSLFL4NzpF+wEF4qrgqaaKX0haXPQEdQ7NKAN+WecoKMHV09YcuL/DHxrUsYQOK3MiuDf7Ip2OXfQ==",
-      "dev": true,
-      "license": "ISC",
-      "engines": {
-        "node": ">=8"
+        "tar": "*"
       }
     },
     "node_modules/@types/tunnel": {
@@ -11500,9 +11493,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.9",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.9.tgz",
-      "integrity": "sha512-BTLcK0xsDh2+PUe9F6c2TlRp4zOOBMTkoQHQIWSIzI0R7KG46uEwq4OPk2W7bZcprBMsuaeFsqwYr7pjh6CuHg==",
+      "version": "7.5.19",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.19.tgz",
+      "integrity": "sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index 11a87e98c9..4594fd93d7 100644
--- a/package.json
+++ b/package.json
@@ -99,7 +99,7 @@
     "simple-git": "3.30.0",
     "simple-plist": "1.4.0",
     "source-map": "0.7.6",
-    "tar": "7.5.9",
+    "tar": "7.5.19",
     "ts-morph": "25.0.1",
     "tunnel": "0.0.6",
     "typescript": "5.7.3",
@@ -131,7 +131,7 @@
     "@types/shelljs": "^0.8.11",
     "@types/sinon": "^17.0.3",
     "@types/tabtab": "^3.0.2",
-    "@types/tar": "6.1.13",
+    "@types/tar": "7.0.87",
     "@types/tunnel": "0.0.7",
     "@types/universal-analytics": "0.4.8",
     "@types/uuid": "^10.0.0",