github.com / erehr

erehr/ComfyUI-EreNodes

JavaScript·91 files·commit 1a40570·scanned 8h ago·cached ✓

10/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

threat-state: safelive

FINDINGS ░▒▓

what this code does░▒▓

What happens when you open, install or run it, from the findings below.

when runweb/js/composer.js and web/prompt.js read the clipboard. web/js/composer.js, web/prompt.js

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

warningClipboard read accessnavigator.clipboard.readText() reads the user's clipboard. In a wallet/crypto context this is often used to steal copied seed phrases or private keys.web/js/composer.js

    let text = "";
    try { text = await navigator.clipboard.readText(); } catch { return; }
    text = (text || "").trim();
    if (!text) return;

warningClipboard read accessnavigator.clipboard.readText() reads the user's clipboard. In a wallet/crypto context this is often used to steal copied seed phrases or private keys.web/prompt.js

    node.onClipboardReplace = () => {
        navigator.clipboard.readText().then(async text => {
            // Empty clipboard must not wipe the node's tags
            if (!text || !text.trim()) re...

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

37 files scanned @ 1a40570 | 10/30/2026 | heuristic scan — always review manually

risk by category

code execution2

network & exfiltration0

file system access8

obfuscation0

supply chain0

owasp / injection0

telemetry

files 37/91rules hit 3engine v10commit 1a40570

github

erehr/ComfyUI-EreNodes

Prompt management nodes - toggleable tags, prompt library, autocomplete, sidebar browser, booru browser, lora loader. Drag and drop. Nodes 2.0 compatible.

JavaScript

509d

91 files

37 scanned(41%)

1a40570

network indicators░▒▓

Hosts this code names or would connect to. 16 found, decoded and call-site destinations first. Informational, not scored.

https://gelbooru.comurlpy/booru.py:36
https://safebooru.org/index.phpurlpy/booru.py:99 +1 more
https://gelbooru.com/index.phpurlpy/booru.py:119 +1 more
https://e621.net/posts/urlpy/booru.py:143
https://e621.net/posts.jsonurlpy/booru.py:168
https://safebooru.org/t.jpgurlpy/booru.py:305 +1 more
https://safebooru.org/f.pngurlpy/booru.py:305
https://img4.gelbooru.com/thumbnails/a.jpgurlpy/booru.py:307
https://safebooru.org/thumbnails/1/a.jpgurlpy/booru.py:308
https://static1.e621.net/data/sample/a.jpgurlpy/booru.py:309
http://img4.gelbooru.com/a.jpgurlpy/booru.py:310
https://evilgelbooru.com/a.jpgurlpy/booru.py:311
https://gelbooru.com.evil.net/a.jpgurlpy/booru.py:312
https://img4.gelbooru.com/t.jpgurlpy/booru.py:313
https://civitai.com/models/urlpy/prompt_api.py:353
https://animadex.neturlscripts/animadex_import.py:24

architecture░▒▓

entry (0) flagged (2) pkg (33)

70 nodes · 152 edgesscroll to zoom · click node to jump to finding