MAL-2025-16962 Malicious code in cherry-vve-project (npm)

The package cherry-vve-project was found to contain malicious code...

MAL-2025-30561 Malicious code in project-ud5vw-cherry (npm)

The package project-ud5vw-cherry was found to contain malicious code...

MAL-2025-16924 Malicious code in cherry-india-raspberry-zrfxp (npm)

The package cherry-india-raspberry-zrfxp was found to contain malicious code...

MAL-2025-31352 Malicious code in quince-cherry-copw (npm)

The package quince-cherry-copw was found to contain malicious code...

MAL-2025-30017 Malicious code in project-b1by8-cherry (npm)

The package project-b1by8-cherry was found to contain malicious code...

MAL-2025-16947 Malicious code in cherry-s2l-project (npm)

The package cherry-s2l-project was found to contain malicious code...

MAL-2025-25128 Malicious code in lemon-tango-cherry-pnsyi (npm)

The package lemon-tango-cherry-pnsyi was found to contain malicious code...

MAL-2025-16922 Malicious code in cherry-ida-project (npm)

The package cherry-ida-project was found to contain malicious code...

MAL-2025-21650 Malicious code in golf-cherry-iabh (npm)

The package golf-cherry-iabh was found to contain malicious code...

MAL-2025-31154 Malicious code in quasar-cherry-neqb (npm)

The package quasar-cherry-neqb was found to contain malicious code...

MAL-2025-40147 Malicious code in yam-cherry-ugli-uanpi (npm)

The package yam-cherry-ugli-uanpi was found to contain malicious code...

MAL-2025-15476 Malicious code in bark-cherry-vvpi (npm)

The package bark-cherry-vvpi was found to contain malicious code...

MAL-2025-40144 Malicious code in yam-cherry-hzqy (npm)

The package yam-cherry-hzqy was found to contain malicious code...

MAL-2025-33194 Malicious code in sierra-cherry-raspberry-rsfnx (npm)

The package sierra-cherry-raspberry-rsfnx was found to contain malicious code...

MAL-2025-16914 Malicious code in cherry-elderberry-charlie-xtila (npm)

The package cherry-elderberry-charlie-xtila was found to contain malicious code...

MAL-2025-21651 Malicious code in golf-cherry-ygem (npm)

The package golf-cherry-ygem was found to contain malicious code...

MAL-2025-16967 Malicious code in cherry-yiu-project (npm)

The package cherry-yiu-project was found to contain malicious code...

MAL-2025-16953 Malicious code in cherry-strawberry-ycdz (npm)

The package cherry-strawberry-ycdz was found to contain malicious code...

MAL-2025-16903 Malicious code in cherry-bravo-delta-vgwgv (npm)

The package cherry-bravo-delta-vgwgv was found to contain malicious code...

CVE-2025-54063

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on a...