pkgscan.dev VS Code extension scan report

Is lolpaon.umltocode 0.0.7 safe?

1 of 4 security engines flagged lolpaon.umltocode 0.0.7 as malicious when pkgscan.dev scanned it on 2026-10-26. Do not install this VS Code extension. If it is already installed, remove it and rotate any credentials or tokens it could have read.

Flagged by 1 scanner Status: completed

Full findings from every engine are public — no account required.

Scan statuscompleted
Engines4 engines reported
Malware engines1 engine flagged this artifact as malicious
Issues reported0 engines reported security issues (for example known vulnerabilities)
First seen2026-10-26
Analyzed2026-10-26
SHA-256dec386060981aca01fd359a8e83e22e44abe4967805db53ef09c088694b2b4f3
Package URLpkg:vscode-extension/lolpaon/umltocode@0.0.7

Engines

Open the full interactive report on pkgscan.dev →

pkgscan.dev is built by Yeeth Security. Read our malware research on VS Code extensions, npm, and PyPI.