chanon/comfyui-obvpm-timeline

Python·76 files·commit 068a97b·scanned 4d ago·cached ✓

70/100

DANGEROUS

Sensitive capability combinations reachable from entry points. Do not run without review.

This repository contains patterns associated with malware. Do NOT run this code.

verdict accurate?

threat-state: dangerouslive

FINDINGS ░▒▓

criticalFunction() constructor detectednew Function() is equivalent to eval() and can execute arbitrary code strings.tests/test_delete_leaves_gap.mjs

].join("\n");
const ui = new Function("st", "specHandover", body)(st, specHandover);

const META = {

criticalFunction() constructor detectednew Function() is equivalent to eval() and can execute arbitrary code strings.tests/test_move_in_time.mjs

].join("\n");
const ui = new Function("seqWidget", "specHandover", body)(seqWidget, specHandover);

// Sidecar headers, single-pin fast path. A extends into B at frame 90 of

criticalFunction() constructor detectednew Function() is equivalent to eval() and can execute arbitrary code strings.tests/test_part_ids.py

].join("\n");
const { tlParseSequence, tlFormatLine } = new Function(body)();
const lines = JSON.parse(process.argv[2]);
process.stdout.write(JSON.stringify(lines.map((l) => {

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

infoSuspicious file in repoVery large source file (551KB) — could contain obfuscated payloadweb/h3_mctx_ui.js+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

58 files scanned @ 068a97b | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution25

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 58/76rules hit 5engine v7commit 068a97b

github

chanon/comfyui-obvpm-timeline

ComyfUI timeline and clip extension nodes for Minimax H3

Python

227

57d

76 files

58 scanned(76%)

068a97b

architecture░▒▓

entry (0) flagged (6) pkg (58)

111 nodes · 304 edgesscroll to zoom · click node to jump to finding