--- title: Malicious package detection with Runtime Vulnerability... description: Dynatrace has expanded its Runtime Vulnerability Analytics (RVA) to detect malicious packages at runtime, not just known vulnerabilities. Unlike traditional... canonical: https://daily.dev/posts/malicious-package-detection-with-runtime-vulnerability-analytics-identify-threats-at-runtime-sbb1zvtcr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Malicious package detection with Runtime Vulnerability Analytics: Identify threats at runtime | daily.dev og:description: Dynatrace has expanded its Runtime Vulnerability Analytics (RVA) to detect malicious packages at runtime, not just known vulnerabilities. Unlike traditional... og:url: https://daily.dev/posts/malicious-package-detection-with-runtime-vulnerability-analytics-identify-threats-at-runtime-sbb1zvtcr og:image: https://api.daily.dev/og/posts/sBb1ZvtcR.png og:image:alt: Malicious package detection with Runtime Vulnerability Analytics: Identify threats at runtime og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Malicious package detection with Runtime Vulnerability Analytics: Identify threats at runtime **[Dynatrace](https://daily.dev/sources/dynatrace)** · 5 min read · 2 upvotes · 0 comments ## Summary Dynatrace has expanded its Runtime Vulnerability Analytics (RVA) to detect malicious packages at runtime, not just known vulnerabilities. Unlike traditional vulnerability scanning, malicious package detection identifies intentionally harmful dependencies that execute immediately upon installation. The feature integrates data from OSV.dev and the OpenSSF Malicious Packages project, covering six ecosystems: Java, JavaScript, Python, Go, .NET, and PHP. Malicious packages are automatically scored as critical severity (CVSS 4.0: 9.3) and appear alongside vulnerability records in the Vulnerabilities app with no additional configuration. Available in Dynatrace version 1.343, rolling out July 2026. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Supply chain security: How to detect malicious software packages with Dynatrace](https://daily.dev/posts/supply-chain-security-how-to-detect-malicious-software-packages-with-dynatrace-b2h9dxpez) · Dynatrace · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops) [View this post on daily.dev](https://daily.dev/posts/malicious-package-detection-with-runtime-vulnerability-analytics-identify-threats-at-runtime-sbb1zvtcr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious package detection with Runtime Vulnerability Analytics: Identify threats at runtime","url":"https://daily.dev/posts/malicious-package-detection-with-runtime-vulnerability-analytics-identify-threats-at-runtime-sbb1zvtcr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/malicious-package-detection-with-runtime-vulnerability-analytics-identify-threats-at-runtime-sbb1zvtcr"},"datePublished":"2026-07-31T18:48:27.699Z","dateModified":"2026-07-31T18:53:34.412Z","description":"Dynatrace has expanded its Runtime Vulnerability Analytics (RVA) to detect malicious packages at runtime, not just known vulnerabilities. Unlike traditional...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ef467a5a06e1d27fa092b09cb2cdebd8?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ef467a5a06e1d27fa092b09cb2cdebd8?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dynatrace","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dynatrace","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3ca5a9897e9748f4a39fa9736389609e","url":"https://daily.dev/sources/dynatrace"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/malicious-package-detection-with-runtime-vulnerability-analytics-identify-threats-at-runtime-sbb1zvtcr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,devops","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dynatrace","item":"https://daily.dev/sources/dynatrace"},{"@type":"ListItem","position":3,"name":"Malicious package detection with Runtime Vulnerability Analytics: Identify threats at runtime"}]} ```