npm

toonfetch@0.3.2

Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 10:42 AM UTC

Malicious

OSV ID

MAL-2025-191436

Ecosystem

npm

Summary

The package toonfetch was found to contain malicious code.

Source: amazon-inspector (34259fc3807663e7c172b15e761dc591d545f94c836f98941c9c570667b3e0f4)

Protect your entire dependency tree

Scan your lock files automatically on every PR. Block malicious packages before they reach production.