diff --git a/pkgs/by-name/ug/uglify-js/package-lock.json b/pkgs/by-name/ug/uglify-js/package-lock.json
index 961c9ef4314f..4725496e9840 100644
--- a/pkgs/by-name/ug/uglify-js/package-lock.json
+++ b/pkgs/by-name/ug/uglify-js/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "uglify-js",
-  "version": "3.18.0",
+  "version": "3.19.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "uglify-js",
-      "version": "3.18.0",
+      "version": "3.19.3",
       "license": "BSD-2-Clause",
       "bin": {
         "uglifyjs": "bin/uglifyjs"
diff --git a/pkgs/by-name/ug/uglify-js/package.nix b/pkgs/by-name/ug/uglify-js/package.nix
index 4056c78af31f..b664a63046ba 100644
--- a/pkgs/by-name/ug/uglify-js/package.nix
+++ b/pkgs/by-name/ug/uglify-js/package.nix
@@ -10,16 +10,16 @@
 
 buildNpmPackage rec {
   pname = "uglify-js";
-  version = "3.18.0";
+  version = "3.19.3";
 
   src = fetchFromGitHub {
     owner = "mishoo";
     repo = "UglifyJS";
     rev = "v${version}";
-    hash = "sha256-m+OEcvWEk4RX0C4re9TFZpkcBvSwl7qfIM+56t100ws=";
+    hash = "sha256-sMLQSB1+ux/ya/J22KGojlAxWhtPQdk22KdHy43zdyg=";
   };
 
-  npmDepsHash = "sha256-iLWmNifHpVvFSFXkfItVpGlh6za9T9wSr1Af4CQQSGM=";
+  npmDepsHash = "sha256-/Xb8DT7vSzZPEd+Z+z1BlFnrOeOwGP+nGv2K9iz6lKI=";
 
   postPatch = ''
     cp ${./package-lock.json} package-lock.json
@@ -54,6 +54,7 @@ buildNpmPackage rec {
 
   meta = {
     homepage = "https://github.com/mishoo/UglifyJS";
+    changelog = "https://github.com/mishoo/UglifyJS/releases/tag/v" + version;
     description = "JavaScript parser / mangler / compressor / beautifier toolkit";
     mainProgram = "uglifyjs";
     license = lib.licenses.bsd2;
diff --git a/pkgs/by-name/ug/uglify-js/update.sh b/pkgs/by-name/ug/uglify-js/update.sh
index a9ebcf39e93b..3c003b6c8694 100755
--- a/pkgs/by-name/ug/uglify-js/update.sh
+++ b/pkgs/by-name/ug/uglify-js/update.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env nix-shell
-#!nix-shell -i bash -p ripgrep common-updater-scripts nodejs prefetch-npm-deps jq
+#!nix-shell -i bash -p ripgrep sd common-updater-scripts nodejs prefetch-npm-deps jq
 
 set -xeu -o pipefail