pkgscan.dev VS Code extension scan report

Is koltyakov.varro 0.33.35 safe?

1 of 5 security engines flagged koltyakov.varro 0.33.35 as malicious when pkgscan.dev scanned it on 2026-11-02. Do not install this VS Code extension. If it is already installed, remove it and rotate any credentials or tokens it could have read.

Flagged by 1 scanner Status: completed

Full findings from every engine are public — no account required.

Scan statuscompleted
Engines5 engines reported
Malware engines1 engine flagged this artifact as malicious
Issues reported1 engine reported security issues (for example known vulnerabilities)
First seen2026-11-02
Analyzed2026-11-02
SHA-25690d97d46f3ae4fea48c9ff1d907d8a4b18c507351e79d6b8920ea69094bca3bd
Package URLpkg:vscode-extension/koltyakov/varro@0.33.35

Engines

Open the full interactive report on pkgscan.dev →

pkgscan.dev is built by Yeeth Security. Read our malware research on VS Code extensions, npm, and PyPI.