diff --git a/src/bun.lockb b/src/bun.lockb
index cc445346f..18e0fe611 100755
Binary files a/src/bun.lockb and b/src/bun.lockb differ
diff --git a/src/package.json b/src/package.json
index 9840f7992..2062cb7b8 100644
--- a/src/package.json
+++ b/src/package.json
@@ -67,7 +67,7 @@
     "terser": "^5.20.0",
     "threads": "^1.7.0",
     "tinycon": "0.6.8",
-    "ueberdb2": "^4.2.13",
+    "ueberdb2": "^4.2.17",
     "underscore": "1.13.6",
     "unorm": "1.6.0",
     "wtfnode": "^0.9.1"
diff --git a/src/static/js/pluginfw/plugins.js b/src/static/js/pluginfw/plugins.js
index 099662285..e7ac500c3 100644
--- a/src/static/js/pluginfw/plugins.js
+++ b/src/static/js/pluginfw/plugins.js
@@ -111,7 +111,7 @@ exports.getPackages = async () => {
   //   * The `--no-production` flag is required (or the `NODE_ENV` environment variable must be
   //     unset or set to `development`) because otherwise `npm ls` will not mention any packages
   //     that are not included in `package.json` (which is expected to not exist).
-  const cmd = ['bun', 'ls', '--long', '--json', '--depth=0', '--no-production'];
+  const cmd = ['npm', 'ls', '--long', '--json', '--depth=0', '--no-production'];
   const {dependencies = {}} = JSON.parse(await runCmd(cmd, {stdio: [null, 'string']}));
   await Promise.all(Object.entries(dependencies).map(async ([pkg, info]) => {
     if (!pkg.startsWith(exports.prefix)) {