mirror of
https://github.com/Comfy-Org/ComfyUI-Manager.git
synced 2026-11-04 23:37:31 +00:00
[GH-ISSUE #1851] The Manager always downloads strange custom nodes that I don't need #793
Labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Comfy-Org/ComfyUI-Manager#793
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @CCJetWing on GitHub (May 20, 2025).
Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/1851
Everyday it automatically install strange custom nodes that I don't need from strange places, how can I shut that down?
@ltdrdata commented on GitHub (May 20, 2025):
That shouldn't happen. Did you change the security level to weak?
That could be a form of attack.
Please compress the
ComfyUI-Fast6directory and send it to my email:dr.lt.data@gmail.com
Then, delete the directory.
@christian-byrne commented on GitHub (May 20, 2025):
Could you also elaborate a bit on what causes the nodes to install? Is it happening after you click install button in the UI, but the wrong node is installed? Or does it happen automatically without your input?
@CCJetWing commented on GitHub (May 23, 2025):
I haven't done anything, just left the ComfyUI alone and it suddenly download the nodes
@christian-byrne commented on GitHub (May 23, 2025):
That it strange. Can you follow the advice of ltdrdata above?
@CCJetWing commented on GitHub (May 26, 2025):
The problem seems solved with high manager security level, thanks a lot.
@ltdrdata commented on GitHub (May 28, 2025):
Switching to Weak is only recommended as a temporary measure. It appears that a hacking attempt specifically targeted you. If the system was ever restarted with it installed, there could be other potential issues.
As mentioned in the email, please send me the archive file you have.
@ltdrdata commented on GitHub (May 28, 2025):
Based on the analysis, the file you sent was a program that secretly mines cryptocurrency.
Are you using Windows or Linux?
@CCJetWing commented on GitHub (Jun 14, 2025):
Linux, and I don't know why it sometimes run prompts that I don't instructed and generate images with prefix final_output_.
@ltdrdata commented on GitHub (Jun 15, 2025):
That issue is not related to ComfyUI-Manager.
If you enabled remote access using
--listen, it's possible that a third party executed it through that.@CCJetWing commented on GitHub (Jun 15, 2025):
Is it normal that the Manager always fetch data from:
~/ComfyUI-Manager/cashe/##########_custom-node-list.json
~/ComfyUI-Manager/cache/#########_github-stats.json
~/ComfyUI-Manager/cache/#########_extras.json
https://raw.githubusercontent.com/ltdrdata/ComfyUI-Manager/main/extras.json
~/ComfyUI-Manager/cashe/##########_model-list.json
~/ComfyUI-Manager/cashe/##########_extension-node-map.json
and then it starts to download models that I might not need
@ltdrdata commented on GitHub (Jun 15, 2025):
It is normal to fetch the list at startup. An update that skips this fetch is currently in preparation. Model downloading is a completely separate event. There are many node packs that download models aside from ComfyUI-Manager.