A dynamic package is a software component that can be loaded or linked after the main program is built, often when the application starts or while it is running. This differs from code incorporated into an executable during the main build.
Dynamic packages make software easier to extend and reuse, but they also make trust checks important: defenders should verify a package’s source and integrity, control which versions are accepted, and review changes to what the application loads. Attackers may try to exploit weak controls by supplying or substituting a malicious component. Dynamic loading alone is not a vulnerability; the risk depends on how packages are selected, verified, and protected.