npm
Malicious react-toast-cold @2.6.1
Vulnerability report · Last retrieved from osv.dev August 15, 2026 at 1:35 PM UTC
OSV ID
MAL-2026-626
Ecosystem
npm
Summary
The package react-toast-cold was found to contain malicious code.
Source: amazon-inspector (10dcf80d6b6e15bcfb18c2f1a4211efd1c79f6f66e8aa34bbab7107a90d1da86)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.