
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
A fast, lightweight DynamoDB emulator backed by SQLite. Drop-in replacement for DynamoDB Local and dynalite. No Docker, no JVM.
npm install --save-dev dynoxide
Or run directly without installing:
npx dynoxide --port 8000
Start an HTTP server:
dynoxide --port 8000
With a persistent database:
dynoxide --db-path data.db --port 8000
Then point any DynamoDB SDK at http://localhost:8000:
aws dynamodb list-tables --endpoint-url http://localhost:8000
Dynoxide includes an MCP server for coding agents (Claude Code, Cursor, etc.):
dynoxide mcp
dynoxide mcp --db-path data.db
Load data from a DynamoDB table export into a local Dynoxide instance:
dynoxide import --source ./export-data/ --schema schema.json --output data.db
| Platform | Architecture |
|---|---|
| macOS | x64, arm64 (Apple Silicon) |
| Linux | x64, arm64 |
| Windows | x64 |
This package installs a platform-specific prebuilt binary via npm's optionalDependencies. No compilation, no Docker, no JVM.
The binary is the same one available via Homebrew, GitHub Releases, and crates.io.
MIT or Apache-2.0, at your option.
FAQs
A DynamoDB emulator for testing and CI. A single static binary that starts in milliseconds, verified against real AWS.
The npm package dynoxide receives a total of 9,858 weekly downloads. As such, dynoxide popularity was classified as popular.
We found that dynoxide demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.