pkgscan.dev VS Code extension scan report
Is koltyakov.varro 0.33.35 safe?
1 of 5 security engines flagged koltyakov.varro 0.33.35 as malicious when pkgscan.dev scanned it on 2026-11-02. Do not install this VS Code extension. If it is already installed, remove it and rotate any credentials or tokens it could have read.
Flagged by 1 scanner Status: completed
Full findings from every engine are public — no account required.
| Scan status | completed |
|---|---|
| Engines | 5 engines reported |
| Malware engines | 1 engine flagged this artifact as malicious |
| Issues reported | 1 engine reported security issues (for example known vulnerabilities) |
| First seen | 2026-11-02 |
| Analyzed | 2026-11-02 |
| SHA-256 | 90d97d46f3ae4fea48c9ff1d907d8a4b18c507351e79d6b8920ea69094bca3bd |
| Package URL | pkg:vscode-extension/koltyakov/varro@0.33.35 |
Engines
- Flagged argus
- Unsupported depsdev
- Clean grype
- Issues reported guarddog
- Clean osv
- Clean skillspector
Scanned versions
- varro@0.33.35 — scanned 2026-11-02 this version
More from koltyakov
All scanned extensions from koltyakov →