
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
ToastMaker is a light javascript library for showing toast notifications on web page
Toast Maker is a simple and very lightweight javascript library for showing toast notification messages on web page. It provides multiple configurations to customize the toast styling(font, background, size ... anything), duration, position etc.
Follow the steps mentioned below to install the library in npm project.
npm install --save toastmaker
or
yarn add toastmaker -S
After adding the toastmaker module to your project, import it in your script as shown below.
import ToastMaker from 'toastmaker';
import "toastmaker/dist/toastmaker.css";
NOTE: The toastmaker.css is the default css file. If you want you can refer to it and create your own css file and import it instead of this default one.
ToastMaker can also be used with plain vanilla javascript project. Just add the minified javascript and css file in you main html and you can start using it inside the javascript.
<link rel="stylesheet" type="text/css" href="https://unpkg.com/toastmaker/dist/toastmaker.min.css">
<script type="text/javascript" src="https://unpkg.com/toastmaker/dist/toastmaker.min.js"></script>
If you want you can download the bundle from the releases section, then include & reference the files locally rather than using the cdn links.
Using ToastMaker is very simple. Create a toast by passing the text message, as shown in below example
ToastMaker('Hi There!');
If you want to change the default timeout, position, styling etc you can pass the optional arguments. Refer below example.
ToastMaker('Hi There!', 2000, {
styles: { fontSize: '18px', backgroundColor: 'green' },
classList: ['custom-class', 'other-custom-class'],
align: 'right',
valign: 'top'
});
You can specify multiple styles or your own css classes using styles and classList options respectively. This is useful in case you want to change the background, font-size, color, padding, border, ... and a lot of other styling as per your requirement.
ToastMaker("Hi There!", 2000, {
styles: { fontSize: "15px" },
classList: ["custom-class"]
});
For more examples, check out the live demo page - ToastMaker Demo
| Option | Type / Allowed Values | Description | Default | Mandatory? |
|---|---|---|---|---|
text | string | Text message to be shown in toast | N/A | Yes |
timeout | number | Duration (In milliseconds) for which the toast should be displayed | 3000 | No |
styles | object | Object containing style properties to be applied to toast | N/A | No |
classList | array | Array of css classes to be applied to toast | N/A | No |
align | 'left' 'center' 'right' | Horizontal alignment for toast | 'center' | No |
valign | 'top' 'bottom' | Vertical alignment for toast | 'bottom' | No |
Note: All options except text and timeout needs to be wrapped inside an object and passed to the ToastMaker as the 3rd argument.
Refer How to use? section to know how these options should be used with the ToastMaker function.
| size | gzip | |
|---|---|---|
| toastmaker | ||
| toastify-js | ||
| toastr |
For the versions available, see the tags on this repository.
This project is licensed under the MIT License - see the LICENSE.md file for details
FAQs
ToastMaker is a light javascript library for showing toast notifications on web page
The npm package toastmaker receives a total of 33 weekly downloads. As such, toastmaker popularity was classified as not popular.
We found that toastmaker demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.