{"page":1,"pageSize":10,"total":10,"totalPages":1,"versions":[{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-11T18:10:29.561188Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.28/node.zip","id":"c5bca775-e1e4-4c2d-9192-de2ce5139e1a","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.6: arbitrary-file-read, path-traversal\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"policy-v0.6: reflag-pending-review\", \"by\": \"drltdata@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.28"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-10T04:24:03.092099Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.27/node.zip","id":"859bf3c3-7d2b-442b-84ac-acf0506c2c9e","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.6: arbitrary-file-read, path-traversal\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"policy-v0.6: reflag-pending-review\", \"by\": \"drltdata@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.27"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-09T10:07:46.271631Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.26/node.zip","id":"c278c9ea-7a60-4b6c-9336-508d0eb81868","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.6: arbitrary-file-write, arbitrary-file-delete, arbitrary-file-read\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"policy-v0.6: reflag-pending-review\", \"by\": \"drltdata@comfy.org\"}, {\"status\": \"NodeVersionStatusFlagged\", \"message\": \"policy-v0.6: arbitrary-file-read, path-traversal\", \"by\": \"drltdata@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.26"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-08T19:02:01.180418Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.25/node.zip","id":"5633bb17-2d34-4a6c-873d-7ea9b83e8424","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.6: arbitrary-file-write, arbitrary-file-delete, arbitrary-file-read\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"policy-v0.6: reflag-pending-review\", \"by\": \"drltdata@comfy.org\"}, {\"status\": \"NodeVersionStatusFlagged\", \"message\": \"policy-v0.6: arbitrary-file-read, path-traversal\", \"by\": \"drltdata@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.25"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-04T22:22:02.785081Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.24/node.zip","id":"34a2704e-195b-438e-a4dd-431d720eb4c9","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.5: arbitrary-file-read\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"[\\n    {\\n        \\\"admin_tags\\\": [],\\n        \\\"code_snippet\\\": \\\"137 |     \\\\\\\"ha\\\\\\\",\\\\n138 |     \\\\\\\"ba\\\\\\\",\\\\n139 |     \\\\\\\"jw\\\\\\\",\\\\n140 |     \\\\\\\"su\\\\\\\",\\\\n141 |     \\\\\\\"yue\\\\\\\",\\\\n142 | ]\\\\n143 | \\\",\\n        \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n        \\\"file_path\\\": \\\"core/lyric_alignment.py\\\",\\n        \\\"issue_type\\\": \\\"python_privilege_escalation\\\",\\n        \\\"line_number\\\": 140,\\n        \\\"line_snippet\\\": \\\"\\\\\\\"su\\\\\\\",\\\",\\n        \\\"metadata\\\": {\\n            \\\"attack_id\\\": [\\n                \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"T1548.003 Sudo and Sudo Caching\\\"\\n            ],\\n            \\\"confidence\\\": 60,\\n            \\\"matched_patterns\\\": [\\n                \\\"$su_string_presence\\\"\\n            ],\\n            \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"attack_id2\\\": \\\"T1548.003 Sudo and Sudo Caching\\\",\\n                \\\"category\\\": \\\"Privilege Escalation\\\",\\n                \\\"confidence_note\\\": \\\"Four confidence tiers: _direct (95%) matches execution sinks, _indirect (75%) matches variable assignment and deferred execution prep, _presence (60%) matches bare string literals (policy: existence in source = detection), _presence + _sink_indicator co-occurrence (85%) elevates when tool name co-exists with execution sink in same file. Note: $su_string_presence is case-sensitive (no nocase) to prevent FP on 'SU' acronyms; lowercase 'su' in non-security strings remains a known acceptable FP under FN-prevention-first policy. Comment/docstring FP mitigated by scanner's remove_comments() preprocessing.\\\",\\n                \\\"date\\\": \\\"2026-02-25\\\",\\n                \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n                \\\"severity\\\": \\\"4\\\",\\n                \\\"traceability\\\": \\\"Pattern IDs: PEX-001..PEX-038. See docs/PATTERN_TRACEABILITY.md\\\",\\n                \\\"version\\\": \\\"1.1\\\"\\n            },\\n            \\\"yara_rule\\\": \\\"python_privilege_escalation\\\"\\n        },\\n        \\\"recommendation\\\": null,\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    },\\n    {\\n        \\\"admin_tags\\\": [\\n            \\\"any-network-requests\\\"\\n        ],\\n        \\\"code_snippet\\\": \\\"75 |                 return function(*args, **kwargs)\\\\n76 |             started = time.monotonic()\\\\n77 |             try:\\\\n78 |                 bound = signature.bind(*args, **kwargs)\\\\n79 |                 bound.apply_defaults()\\\\n80 |                 parameters = {key: value for key, value in bound.arguments.items() if key not in {\\\\\\\"cls\\\\\\\", \\\\\\\"self\\\\\\\"}}\\\\n81 |             except TypeError:\\\",\\n        \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n        \\\"file_path\\\": \\\"core/node_debug.py\\\",\\n        \\\"issue_type\\\": \\\"python_network_operations\\\",\\n        \\\"line_number\\\": 78,\\n        \\\"line_snippet\\\": \\\"bound = signature.bind(*args, **kwargs)\\\",\\n        \\\"metadata\\\": {\\n            \\\"confidence\\\": 90,\\n            \\\"matched_patterns\\\": [\\n                \\\"$socket4\\\"\\n            ],\\n            \\\"yara_matches\\\": [\\n                {\\n                    \\\"filepath\\\": \\\"core/node_debug.py\\\",\\n                    \\\"strings\\\": [\\n                        {\\n                            \\\"identifier\\\": \\\"$socket4\\\",\\n                            \\\"instances\\\": [\\n                                {\\n                                    \\\"line\\\": \\\"                bound = signature.bind(*args, **kwargs)\\\\n\\\",\\n                                    \\\"line_number\\\": 78,\\n                                    \\\"matched_data\\\": \\\".bind(\\\",\\n                                    \\\"matched_length\\\": 6,\\n                                    \\\"offset\\\": 33\\n                                }\\n                            ]\\n                        }\\n                    ]\\n                }\\n            ],\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1041 Exfiltration Over C2 Channel\\\",\\n                \\\"attack_id2\\\": \\\"T1048 Exfiltration Over Alternative Protocol\\\",\\n                \\\"category\\\": \\\"Exfiltration\\\",\\n                \\\"date\\\": \\\"2025-06-30\\\",\\n                \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1041/\\\",\\n                \\\"severity\\\": \\\"3\\\",\\n                \\\"version\\\": \\\"1.0\\\"\\n            }\\n        },\\n        \\\"recommendation\\\": \\\"\\\",\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    },\\n    {\\n        \\\"admin_tags\\\": [\\n            \\\"any-network-requests\\\"\\n        ],\\n        \\\"code_snippet\\\": \\\"168 |         for (const target of targets) for (let i = previousCount; i \\\\u003c next.length; i++) {\\\\n169 |             let slot = target.inputs.findIndex(input =\\\\u003e input.name === `any_${i + 1}`);\\\\n170 |             if (slot \\\\u003c 0) { target.addInput(`any_${i + 1}`, node.outputs[i].type); slot = target.inputs.length - 1; }\\\\n171 |             node.connect(i, target, slot);\\\\n172 |         }\\\\n173 |     }\\\\n174 |     node.refreshChainControls();\\\",\\n        \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n        \\\"file_path\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n        \\\"issue_type\\\": \\\"python_network_operations\\\",\\n        \\\"line_number\\\": 171,\\n        \\\"line_snippet\\\": \\\"node.connect(i, target, slot);\\\",\\n        \\\"metadata\\\": {\\n            \\\"confidence\\\": 90,\\n            \\\"matched_patterns\\\": [\\n                \\\"$socket3\\\"\\n            ],\\n            \\\"yara_matches\\\": [\\n                {\\n                    \\\"filepath\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n                    \\\"strings\\\": [\\n                        {\\n                            \\\"identifier\\\": \\\"$socket3\\\",\\n                            \\\"instances\\\": [\\n                                {\\n                                    \\\"line\\\": \\\"            node.connect(i, target, slot);\\\\n\\\",\\n                                    \\\"line_number\\\": 171,\\n                                    \\\"matched_data\\\": \\\".connect(\\\",\\n                                    \\\"matched_length\\\": 9,\\n                                    \\\"offset\\\": 18\\n                                }\\n                            ]\\n                        }\\n                    ]\\n                }\\n            ],\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1041 Exfiltration Over C2 Channel\\\",\\n                \\\"attack_id2\\\": \\\"T1048 Exfiltration Over Alternative Protocol\\\",\\n                \\\"category\\\": \\\"Exfiltration\\\",\\n                \\\"date\\\": \\\"2025-06-30\\\",\\n                \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1041/\\\",\\n                \\\"severity\\\": \\\"3\\\",\\n                \\\"version\\\": \\\"1.0\\\"\\n            }\\n        },\\n        \\\"recommendation\\\": \\\"\\\",\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    }\\n]\", \"by\": \"admin@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.24"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-04T17:18:57.484736Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.23/node.zip","id":"68216359-3cef-4190-9d0e-53d05751fb3c","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.5: arbitrary-file-read\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"[\\n    {\\n        \\\"admin_tags\\\": [],\\n        \\\"code_snippet\\\": \\\"135 |     \\\\\\\"ha\\\\\\\",\\\\n136 |     \\\\\\\"ba\\\\\\\",\\\\n137 |     \\\\\\\"jw\\\\\\\",\\\\n138 |     \\\\\\\"su\\\\\\\",\\\\n139 |     \\\\\\\"yue\\\\\\\",\\\\n140 | ]\\\\n141 | \\\",\\n        \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n        \\\"file_path\\\": \\\"core/lyric_alignment.py\\\",\\n        \\\"issue_type\\\": \\\"python_privilege_escalation\\\",\\n        \\\"line_number\\\": 138,\\n        \\\"line_snippet\\\": \\\"\\\\\\\"su\\\\\\\",\\\",\\n        \\\"metadata\\\": {\\n            \\\"attack_id\\\": [\\n                \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"T1548.003 Sudo and Sudo Caching\\\"\\n            ],\\n            \\\"confidence\\\": 60,\\n            \\\"matched_patterns\\\": [\\n                \\\"$su_string_presence\\\"\\n            ],\\n            \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"attack_id2\\\": \\\"T1548.003 Sudo and Sudo Caching\\\",\\n                \\\"category\\\": \\\"Privilege Escalation\\\",\\n                \\\"confidence_note\\\": \\\"Four confidence tiers: _direct (95%) matches execution sinks, _indirect (75%) matches variable assignment and deferred execution prep, _presence (60%) matches bare string literals (policy: existence in source = detection), _presence + _sink_indicator co-occurrence (85%) elevates when tool name co-exists with execution sink in same file. Note: $su_string_presence is case-sensitive (no nocase) to prevent FP on 'SU' acronyms; lowercase 'su' in non-security strings remains a known acceptable FP under FN-prevention-first policy. Comment/docstring FP mitigated by scanner's remove_comments() preprocessing.\\\",\\n                \\\"date\\\": \\\"2026-02-25\\\",\\n                \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n                \\\"severity\\\": \\\"4\\\",\\n                \\\"traceability\\\": \\\"Pattern IDs: PEX-001..PEX-038. See docs/PATTERN_TRACEABILITY.md\\\",\\n                \\\"version\\\": \\\"1.1\\\"\\n            },\\n            \\\"yara_rule\\\": \\\"python_privilege_escalation\\\"\\n        },\\n        \\\"recommendation\\\": null,\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    },\\n    {\\n        \\\"admin_tags\\\": [\\n            \\\"any-network-requests\\\"\\n        ],\\n        \\\"code_snippet\\\": \\\"168 |         for (const target of targets) for (let i = previousCount; i \\\\u003c next.length; i++) {\\\\n169 |             let slot = target.inputs.findIndex(input =\\\\u003e input.name === `any_${i + 1}`);\\\\n170 |             if (slot \\\\u003c 0) { target.addInput(`any_${i + 1}`, node.outputs[i].type); slot = target.inputs.length - 1; }\\\\n171 |             node.connect(i, target, slot);\\\\n172 |         }\\\\n173 |     }\\\\n174 |     node.refreshChainControls();\\\",\\n        \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n        \\\"file_path\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n        \\\"issue_type\\\": \\\"python_network_operations\\\",\\n        \\\"line_number\\\": 171,\\n        \\\"line_snippet\\\": \\\"node.connect(i, target, slot);\\\",\\n        \\\"metadata\\\": {\\n            \\\"confidence\\\": 90,\\n            \\\"matched_patterns\\\": [\\n                \\\"$socket3\\\"\\n            ],\\n            \\\"yara_matches\\\": [\\n                {\\n                    \\\"filepath\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n                    \\\"strings\\\": [\\n                        {\\n                            \\\"identifier\\\": \\\"$socket3\\\",\\n                            \\\"instances\\\": [\\n                                {\\n                                    \\\"line\\\": \\\"            node.connect(i, target, slot);\\\\n\\\",\\n                                    \\\"line_number\\\": 171,\\n                                    \\\"matched_data\\\": \\\".connect(\\\",\\n                                    \\\"matched_length\\\": 9,\\n                                    \\\"offset\\\": 18\\n                                }\\n                            ]\\n                        }\\n                    ]\\n                }\\n            ],\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1041 Exfiltration Over C2 Channel\\\",\\n                \\\"attack_id2\\\": \\\"T1048 Exfiltration Over Alternative Protocol\\\",\\n                \\\"category\\\": \\\"Exfiltration\\\",\\n                \\\"date\\\": \\\"2025-06-30\\\",\\n                \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1041/\\\",\\n                \\\"severity\\\": \\\"3\\\",\\n                \\\"version\\\": \\\"1.0\\\"\\n            }\\n        },\\n        \\\"recommendation\\\": \\\"\\\",\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    }\\n]\", \"by\": \"admin@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.23"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-04T10:55:25.867121Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.22/node.zip","id":"9f0f9c2f-7b7f-4057-a349-1e7a3241ea1b","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.5: arbitrary-file-read\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"[\\n    {\\n        \\\"admin_tags\\\": [],\\n        \\\"code_snippet\\\": \\\"135 |     \\\\\\\"ha\\\\\\\",\\\\n136 |     \\\\\\\"ba\\\\\\\",\\\\n137 |     \\\\\\\"jw\\\\\\\",\\\\n138 |     \\\\\\\"su\\\\\\\",\\\\n139 |     \\\\\\\"yue\\\\\\\",\\\\n140 | ]\\\\n141 | \\\",\\n        \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n        \\\"file_path\\\": \\\"core/lyric_alignment.py\\\",\\n        \\\"issue_type\\\": \\\"python_privilege_escalation\\\",\\n        \\\"line_number\\\": 138,\\n        \\\"line_snippet\\\": \\\"\\\\\\\"su\\\\\\\",\\\",\\n        \\\"metadata\\\": {\\n            \\\"attack_id\\\": [\\n                \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"T1548.003 Sudo and Sudo Caching\\\"\\n            ],\\n            \\\"confidence\\\": 60,\\n            \\\"matched_patterns\\\": [\\n                \\\"$su_string_presence\\\"\\n            ],\\n            \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"attack_id2\\\": \\\"T1548.003 Sudo and Sudo Caching\\\",\\n                \\\"category\\\": \\\"Privilege Escalation\\\",\\n                \\\"confidence_note\\\": \\\"Four confidence tiers: _direct (95%) matches execution sinks, _indirect (75%) matches variable assignment and deferred execution prep, _presence (60%) matches bare string literals (policy: existence in source = detection), _presence + _sink_indicator co-occurrence (85%) elevates when tool name co-exists with execution sink in same file. Note: $su_string_presence is case-sensitive (no nocase) to prevent FP on 'SU' acronyms; lowercase 'su' in non-security strings remains a known acceptable FP under FN-prevention-first policy. Comment/docstring FP mitigated by scanner's remove_comments() preprocessing.\\\",\\n                \\\"date\\\": \\\"2026-02-25\\\",\\n                \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n                \\\"severity\\\": \\\"4\\\",\\n                \\\"traceability\\\": \\\"Pattern IDs: PEX-001..PEX-038. See docs/PATTERN_TRACEABILITY.md\\\",\\n                \\\"version\\\": \\\"1.1\\\"\\n            },\\n            \\\"yara_rule\\\": \\\"python_privilege_escalation\\\"\\n        },\\n        \\\"recommendation\\\": null,\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    },\\n    {\\n        \\\"admin_tags\\\": [\\n            \\\"any-network-requests\\\"\\n        ],\\n        \\\"code_snippet\\\": \\\"168 |         for (const target of targets) for (let i = previousCount; i \\\\u003c next.length; i++) {\\\\n169 |             let slot = target.inputs.findIndex(input =\\\\u003e input.name === `any_${i + 1}`);\\\\n170 |             if (slot \\\\u003c 0) { target.addInput(`any_${i + 1}`, node.outputs[i].type); slot = target.inputs.length - 1; }\\\\n171 |             node.connect(i, target, slot);\\\\n172 |         }\\\\n173 |     }\\\\n174 |     node.refreshChainControls();\\\",\\n        \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n        \\\"file_path\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n        \\\"issue_type\\\": \\\"python_network_operations\\\",\\n        \\\"line_number\\\": 171,\\n        \\\"line_snippet\\\": \\\"node.connect(i, target, slot);\\\",\\n        \\\"metadata\\\": {\\n            \\\"confidence\\\": 90,\\n            \\\"matched_patterns\\\": [\\n                \\\"$socket3\\\"\\n            ],\\n            \\\"yara_matches\\\": [\\n                {\\n                    \\\"filepath\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n                    \\\"strings\\\": [\\n                        {\\n                            \\\"identifier\\\": \\\"$socket3\\\",\\n                            \\\"instances\\\": [\\n                                {\\n                                    \\\"line\\\": \\\"            node.connect(i, target, slot);\\\\n\\\",\\n                                    \\\"line_number\\\": 171,\\n                                    \\\"matched_data\\\": \\\".connect(\\\",\\n                                    \\\"matched_length\\\": 9,\\n                                    \\\"offset\\\": 18\\n                                }\\n                            ]\\n                        }\\n                    ]\\n                }\\n            ],\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1041 Exfiltration Over C2 Channel\\\",\\n                \\\"attack_id2\\\": \\\"T1048 Exfiltration Over Alternative Protocol\\\",\\n                \\\"category\\\": \\\"Exfiltration\\\",\\n                \\\"date\\\": \\\"2025-06-30\\\",\\n                \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1041/\\\",\\n                \\\"severity\\\": \\\"3\\\",\\n                \\\"version\\\": \\\"1.0\\\"\\n            }\\n        },\\n        \\\"recommendation\\\": \\\"\\\",\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    }\\n]\", \"by\": \"admin@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.22"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-04T10:35:19.88955Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.21/node.zip","id":"c4e79c08-1f40-425b-85f7-91c9e05fd62b","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.5: arbitrary-file-read\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"[\\n    {\\n        \\\"admin_tags\\\": [],\\n        \\\"code_snippet\\\": \\\"135 |     \\\\\\\"ha\\\\\\\",\\\\n136 |     \\\\\\\"ba\\\\\\\",\\\\n137 |     \\\\\\\"jw\\\\\\\",\\\\n138 |     \\\\\\\"su\\\\\\\",\\\\n139 |     \\\\\\\"yue\\\\\\\",\\\\n140 | ]\\\\n141 | \\\",\\n        \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n        \\\"file_path\\\": \\\"core/lyric_alignment.py\\\",\\n        \\\"issue_type\\\": \\\"python_privilege_escalation\\\",\\n        \\\"line_number\\\": 138,\\n        \\\"line_snippet\\\": \\\"\\\\\\\"su\\\\\\\",\\\",\\n        \\\"metadata\\\": {\\n            \\\"attack_id\\\": [\\n                \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"T1548.003 Sudo and Sudo Caching\\\"\\n            ],\\n            \\\"confidence\\\": 60,\\n            \\\"matched_patterns\\\": [\\n                \\\"$su_string_presence\\\"\\n            ],\\n            \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"attack_id2\\\": \\\"T1548.003 Sudo and Sudo Caching\\\",\\n                \\\"category\\\": \\\"Privilege Escalation\\\",\\n                \\\"confidence_note\\\": \\\"Four confidence tiers: _direct (95%) matches execution sinks, _indirect (75%) matches variable assignment and deferred execution prep, _presence (60%) matches bare string literals (policy: existence in source = detection), _presence + _sink_indicator co-occurrence (85%) elevates when tool name co-exists with execution sink in same file. Note: $su_string_presence is case-sensitive (no nocase) to prevent FP on 'SU' acronyms; lowercase 'su' in non-security strings remains a known acceptable FP under FN-prevention-first policy. Comment/docstring FP mitigated by scanner's remove_comments() preprocessing.\\\",\\n                \\\"date\\\": \\\"2026-02-25\\\",\\n                \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n                \\\"severity\\\": \\\"4\\\",\\n                \\\"traceability\\\": \\\"Pattern IDs: PEX-001..PEX-038. See docs/PATTERN_TRACEABILITY.md\\\",\\n                \\\"version\\\": \\\"1.1\\\"\\n            },\\n            \\\"yara_rule\\\": \\\"python_privilege_escalation\\\"\\n        },\\n        \\\"recommendation\\\": null,\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    },\\n    {\\n        \\\"admin_tags\\\": [\\n            \\\"any-network-requests\\\"\\n        ],\\n        \\\"code_snippet\\\": \\\"168 |         for (const target of targets) for (let i = previousCount; i \\\\u003c next.length; i++) {\\\\n169 |             let slot = target.inputs.findIndex(input =\\\\u003e input.name === `any_${i + 1}`);\\\\n170 |             if (slot \\\\u003c 0) { target.addInput(`any_${i + 1}`, node.outputs[i].type); slot = target.inputs.length - 1; }\\\\n171 |             node.connect(i, target, slot);\\\\n172 |         }\\\\n173 |     }\\\\n174 |     node.refreshChainControls();\\\",\\n        \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n        \\\"file_path\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n        \\\"issue_type\\\": \\\"python_network_operations\\\",\\n        \\\"line_number\\\": 171,\\n        \\\"line_snippet\\\": \\\"node.connect(i, target, slot);\\\",\\n        \\\"metadata\\\": {\\n            \\\"confidence\\\": 90,\\n            \\\"matched_patterns\\\": [\\n                \\\"$socket3\\\"\\n            ],\\n            \\\"yara_matches\\\": [\\n                {\\n                    \\\"filepath\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n                    \\\"strings\\\": [\\n                        {\\n                            \\\"identifier\\\": \\\"$socket3\\\",\\n                            \\\"instances\\\": [\\n                                {\\n                                    \\\"line\\\": \\\"            node.connect(i, target, slot);\\\\n\\\",\\n                                    \\\"line_number\\\": 171,\\n                                    \\\"matched_data\\\": \\\".connect(\\\",\\n                                    \\\"matched_length\\\": 9,\\n                                    \\\"offset\\\": 18\\n                                }\\n                            ]\\n                        }\\n                    ]\\n                }\\n            ],\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1041 Exfiltration Over C2 Channel\\\",\\n                \\\"attack_id2\\\": \\\"T1048 Exfiltration Over Alternative Protocol\\\",\\n                \\\"category\\\": \\\"Exfiltration\\\",\\n                \\\"date\\\": \\\"2025-06-30\\\",\\n                \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1041/\\\",\\n                \\\"severity\\\": \\\"3\\\",\\n                \\\"version\\\": \\\"1.0\\\"\\n            }\\n        },\\n        \\\"recommendation\\\": \\\"\\\",\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    }\\n]\", \"by\": \"admin@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.21"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-10-03T17:05:42.303627Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5","stable-ts==2.19.1","faster-whisper\u003e=1.2.1,\u003c2","fonttools\u003e=4.0,\u003c5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.4.20/node.zip","id":"c95133d5-17dc-4b89-8a17-08e0896e57eb","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusFlagged","status_reason":"{\"message\": \"policy-v0.5: arbitrary-file-read\", \"by\": \"drltdata@comfy.org\", \"statusHistory\": [{\"status\": \"NodeVersionStatusFlagged\", \"message\": \"[\\n    {\\n        \\\"admin_tags\\\": [],\\n        \\\"code_snippet\\\": \\\"135 |     \\\\\\\"ha\\\\\\\",\\\\n136 |     \\\\\\\"ba\\\\\\\",\\\\n137 |     \\\\\\\"jw\\\\\\\",\\\\n138 |     \\\\\\\"su\\\\\\\",\\\\n139 |     \\\\\\\"yue\\\\\\\",\\\\n140 | ]\\\\n141 | \\\",\\n        \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n        \\\"file_path\\\": \\\"core/lyric_alignment.py\\\",\\n        \\\"issue_type\\\": \\\"python_privilege_escalation\\\",\\n        \\\"line_number\\\": 138,\\n        \\\"line_snippet\\\": \\\"\\\\\\\"su\\\\\\\",\\\",\\n        \\\"metadata\\\": {\\n            \\\"attack_id\\\": [\\n                \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"T1548.003 Sudo and Sudo Caching\\\"\\n            ],\\n            \\\"confidence\\\": 60,\\n            \\\"matched_patterns\\\": [\\n                \\\"$su_string_presence\\\"\\n            ],\\n            \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1548 Abuse Elevation Control Mechanism\\\",\\n                \\\"attack_id2\\\": \\\"T1548.003 Sudo and Sudo Caching\\\",\\n                \\\"category\\\": \\\"Privilege Escalation\\\",\\n                \\\"confidence_note\\\": \\\"Four confidence tiers: _direct (95%) matches execution sinks, _indirect (75%) matches variable assignment and deferred execution prep, _presence (60%) matches bare string literals (policy: existence in source = detection), _presence + _sink_indicator co-occurrence (85%) elevates when tool name co-exists with execution sink in same file. Note: $su_string_presence is case-sensitive (no nocase) to prevent FP on 'SU' acronyms; lowercase 'su' in non-security strings remains a known acceptable FP under FN-prevention-first policy. Comment/docstring FP mitigated by scanner's remove_comments() preprocessing.\\\",\\n                \\\"date\\\": \\\"2026-02-25\\\",\\n                \\\"description\\\": \\\"Detects privilege escalation tool invocation (sudo, su, doas, pkexec, runas) from Python execution sinks\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1548/003/\\\",\\n                \\\"severity\\\": \\\"4\\\",\\n                \\\"traceability\\\": \\\"Pattern IDs: PEX-001..PEX-038. See docs/PATTERN_TRACEABILITY.md\\\",\\n                \\\"version\\\": \\\"1.1\\\"\\n            },\\n            \\\"yara_rule\\\": \\\"python_privilege_escalation\\\"\\n        },\\n        \\\"recommendation\\\": null,\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    },\\n    {\\n        \\\"admin_tags\\\": [\\n            \\\"any-network-requests\\\"\\n        ],\\n        \\\"code_snippet\\\": \\\"168 |         for (const target of targets) for (let i = previousCount; i \\\\u003c next.length; i++) {\\\\n169 |             let slot = target.inputs.findIndex(input =\\\\u003e input.name === `any_${i + 1}`);\\\\n170 |             if (slot \\\\u003c 0) { target.addInput(`any_${i + 1}`, node.outputs[i].type); slot = target.inputs.length - 1; }\\\\n171 |             node.connect(i, target, slot);\\\\n172 |         }\\\\n173 |     }\\\\n174 |     node.refreshChainControls();\\\",\\n        \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n        \\\"file_path\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n        \\\"issue_type\\\": \\\"python_network_operations\\\",\\n        \\\"line_number\\\": 171,\\n        \\\"line_snippet\\\": \\\"node.connect(i, target, slot);\\\",\\n        \\\"metadata\\\": {\\n            \\\"confidence\\\": 90,\\n            \\\"matched_patterns\\\": [\\n                \\\"$socket3\\\"\\n            ],\\n            \\\"yara_matches\\\": [\\n                {\\n                    \\\"filepath\\\": \\\"js/eclipse-getallactive-sync.js\\\",\\n                    \\\"strings\\\": [\\n                        {\\n                            \\\"identifier\\\": \\\"$socket3\\\",\\n                            \\\"instances\\\": [\\n                                {\\n                                    \\\"line\\\": \\\"            node.connect(i, target, slot);\\\\n\\\",\\n                                    \\\"line_number\\\": 171,\\n                                    \\\"matched_data\\\": \\\".connect(\\\",\\n                                    \\\"matched_length\\\": 9,\\n                                    \\\"offset\\\": 18\\n                                }\\n                            ]\\n                        }\\n                    ]\\n                }\\n            ],\\n            \\\"yara_meta\\\": {\\n                \\\"attack_id1\\\": \\\"T1041 Exfiltration Over C2 Channel\\\",\\n                \\\"attack_id2\\\": \\\"T1048 Exfiltration Over Alternative Protocol\\\",\\n                \\\"category\\\": \\\"Exfiltration\\\",\\n                \\\"date\\\": \\\"2025-06-30\\\",\\n                \\\"description\\\": \\\"Detects network operations and potential data exfiltration patterns\\\",\\n                \\\"reference\\\": \\\"https://attack.mitre.org/techniques/T1041/\\\",\\n                \\\"severity\\\": \\\"3\\\",\\n                \\\"version\\\": \\\"1.0\\\"\\n            }\\n        },\\n        \\\"recommendation\\\": \\\"\\\",\\n        \\\"scanner\\\": \\\"yara_scan\\\",\\n        \\\"severity\\\": \\\"info\\\"\\n    }\\n]\", \"by\": \"admin@comfy.org\"}]}","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.4.20"},{"changelog":"","comfy_node_extract_status":"pending","createdAt":"2026-09-24T09:24:06.32241Z","dependencies":["torch","numpy","Pillow","opencv-python","pilgram","safetensors\u003e=0.4,\u003c0.9","torchvision","PyYAML","aiohttp","SoundCard\u003e=0.4.6,\u003c0.5"],"deprecated":false,"downloadUrl":"https://cdn.comfy.org/rvage/ComfyUI_Eclipse/4.3.51/node.zip","id":"a0e9eb52-b4ed-4197-bb2a-f5cbc6bb1a82","node_id":"ComfyUI_Eclipse","status":"NodeVersionStatusActive","status_reason":"Passed automated checks","supported_accelerators":[],"supported_comfyui_frontend_version":"","supported_comfyui_version":"","supported_os":[],"tags":[],"version":"4.3.51"}]}