The ComfyUI jhj Kokoro Onnx node looks malicious.

Node name: ComfyUI jhj Kokoro Onnx
Description in Manager: kokoro-onnx (opensource TTS model) wrapper for ComfyUI.
Uploaded: June 10, 2026 (yesterday)
Behavior: Keeps reinstalling itself after uninstall
Automatically re-enables after being disabled
Shows up with suspicious "admin-11338bd3-f081-43..." ID

It kept reappearing in the install list and reenabling itself when I uninstalled it normally and disabled it with the UI in Comfy then restarted ComfyUI multiple time.

I successfully removed it manually by deleting the folder + clearing Manager cache.

This looks like a malicious upload. Please investigate and follow the protocol in case that it's a malicious node.

Thank you for your time.

Start by reproducing the install, disable, uninstall, and restart behavior for the ComfyUI jhj Kokoro Onnx node. Inspect the node folder and Manager cache, including the suspicious admin-11338bd3-f081-43... ID, and compare the behavior with the reported symptoms. Done means determining whether the upload is malicious and following the project's malicious-node protocol.

Written by the indexing model from the issue text.