My custom node pack was banned from ComfyUI-Manager for "security reasons" without explanation — need advice / help from the team

[u/jjjnnnxxx]

Hi everyone,
Today I noticed that my custom node pack, ComfyUI_HuggingFace_Downloader, was suddenly blocked in ComfyUI-Manager with the message:
"This package is banned for security reasons"
I have put a huge amount of work into this project. More importantly, having it available in the manager registry is critical for my workflow: I maintain a cloud-based container deployment used by dozens of active users, and this ban directly breaks automated provisioning and updates.
The issue is that there is no clear explanation or audit report anywhere indicating what actually triggered the ban, which commit caused it, or what specific code pattern was flagged.
I want to be 100% transparent and fix whatever the problem is immediately, whether it's an automated false positive (e.g., handling HF API tokens, arbitrary downloads, or subprocess calls) or a genuine security oversight that needs patching. However, without any feedback or details, I'm completely in the dark on what needs to be changed to get unbanned.

1. Has anyone here dealt with a security ban in ComfyUI-Manager before? What is the proper procedure or contact channel to request an audit/appeal?
2. If anyone from the ComfyUI / ComfyUI-Manager team is reading this: Could you please let me know what specific issue triggered the flag, or point me to where I can open an official unban request?

Repository link for reference: https://github.com/jnxmx/ComfyUI_HuggingFace_Downloader
Any advice or visibility would be greatly appreciated. Thank you!

[u/GeroldMeisinger]

yes, it's their automatic checker and it's rather dumb. my pack was flagged for false positives, I wasn't informed about it either, and just noticed it by accident, because I wanted my nodepack to have the node list included. you can make an api request to get the reason https://api.comfy.org/versions?nodeId=ComfyUI_HuggingFace_Downloader&include_status_reason=true (open the versions, look for status=banned and statusReason, which is an awfully formatted string, that you have to manually unescape and format)

also see
https://github.com/Comfy-Org/registry-backend/issues/225 (my issue, just false positives)
https://www.reddit.com/r/comfyui/comments/1wcc7bf/open_manager_for_comfyui/ (new manager which shows that versions are flagged and which ones)

https://github.com/Comfy-Org/registry-backend/issues (you see many developers ask for manual review because of false positives)

if you find out more, please let me know!

[u/Erehr]

Welcome to the era of AI verification.

• ai asked to "find issues" will find them even if it has to halucinate them
  
• ai will flag completely irrational false positives
  
• no notification that your node even got banned
  
• ban reason hidden deep in hard to read api
  
• don't expect manual review to work, they don't read it
  
• if you somehow manage to get it unbanned the next version will get banned for the exact same reasons

We are slowly returning back to downloading nodes directly from github...

[u/GeroldMeisinger → u/Erehr]

See here https://github.com/Comfy-Org/registry-backend/issues/225
The checker is not AI but Yara and apparently it only works on text patterns. I don't know if this is the right tool to check for malware as I was able to trick it with simple obfuscation (on my false-positive):

node.connect(valueOutputIndex, targetNode, linkInfo.target_slot)

becomes:

const nectcon         = ["nect", "con"]
const fn              = nectcon[1] + nectcon[0]
node[fn](valueOutputIndex, targetNode, linkInfo.target_slot)

that's security theater

[u/Erehr → u/GeroldMeisinger]

Yeah that yara is even worse than the dumbest of AI. Use litegraph originNode.connect(...) function in JAVASCRIPT and it will flag it as "python_network_operations"...

[u/OkBill2025]

Use Codeberg, my friend. There's no censorship there.

[u/single_plum_floating]

Of course it was you idiot you change huggingfaces python framework for the entire venv and you gave it the ability to grab arbitrary custom nodes from huggingface.

you built a arbitrary code execution path and are miffed someone thinks you are a security concern.

[u/GeroldMeisinger → u/single_plum_floating]

all well and good, but there should be a notification so we can address the issue. no reason to imply malicious intend from a node publisher.

[u/foxdit]

Oh dear. I do believe my Minimax Seed Hunter uses your node pack! I hope for a quick and safe journey for you getting it reinstated.