Police are tracing the source of online-purchased sweets suspected of containing cannabis after three family members, including a two-year-old boy, became seriously ill.