pkgscan.dev VS Code extension scan report
Is lolpaon.umltocode 1.0.0 safe?
1 of 4 security engines flagged lolpaon.umltocode 1.0.0 as malicious when pkgscan.dev scanned it on 2026-10-26. Do not install this VS Code extension. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Flagged by 1 scanner Status: completed
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 4 engines reported |
| Malware engines | 1 engine flagged this artifact as malicious |
| Issues reported | 0 engines reported security issues (for example known vulnerabilities) |
| First seen | 2026-10-26 |
| Analyzed | 2026-10-26 |
| SHA-256 | f314bc708474f96f4f17a5f4f5b3adbd4cab9cf547b4e6aa218709c351c22bde |
| Package URL | pkg:vscode-extension/lolpaon/umltocode@1.0.0 |
Engines
- Flagged argus
- Unsupported depsdev
- Clean grype
- Engine error guarddog
- Clean osv
- Clean skillspector
Scanned versions
- umltocode@1.0.0 — scanned 2026-10-26 this version