MAL-2025-33194 Malicious code in sierra-cherry-raspberry-rsfnx (npm)

The package sierra-cherry-raspberry-rsfnx was found to contain malicious code...

MAL-2025-16924 Malicious code in cherry-india-raspberry-zrfxp (npm)

The package cherry-india-raspberry-zrfxp was found to contain malicious code...

MAL-2025-16947 Malicious code in cherry-s2l-project (npm)

The package cherry-s2l-project was found to contain malicious code...

MAL-2025-21651 Malicious code in golf-cherry-ygem (npm)

The package golf-cherry-ygem was found to contain malicious code...

MAL-2025-30017 Malicious code in project-b1by8-cherry (npm)

The package project-b1by8-cherry was found to contain malicious code...

Malicious code in cherry-void-4nca (npm)

The package cherry-void-4nca was found to contain malicious code...

MAL-2025-16964 Malicious code in cherry-xigua-jxao (npm)

The package cherry-xigua-jxao was found to contain malicious code...

MAL-2025-16919 Malicious code in cherry-grape-bcej (npm)

The package cherry-grape-bcej was found to contain malicious code...

MAL-2025-30468 Malicious code in project-ql6hm-cherry (npm)

The package project-ql6hm-cherry was found to contain malicious code...

MAL-2025-22608 Malicious code in honeydew-victor-cherry-lalwt (npm)

The package honeydew-victor-cherry-lalwt was found to contain malicious code...

MAL-2025-18385 Malicious code in dewdrop-cherry-ejc594-project (npm)

The package dewdrop-cherry-ejc594-project was found to contain malicious code...

Malicious code in tangerine-cherry-eknf (npm)

The package tangerine-cherry-eknf was found to contain malicious code...

MAL-2025-16906 Malicious code in cherry-ch2-project (npm)

The package cherry-ch2-project was found to contain malicious code...

MAL-2025-16966 Malicious code in cherry-yellow-zvf108-project (npm)

The package cherry-yellow-zvf108-project was found to contain malicious code...

MAL-2025-29781 Malicious code in project-2e2c3-cherry (npm)

The package project-2e2c3-cherry was found to contain malicious code...

MAL-2025-16930 Malicious code in cherry-nectarine-kfwl (npm)

The package cherry-nectarine-kfwl was found to contain malicious code...

Malicious code in cherry-uuv-project (npm)

The package cherry-uuv-project was found to contain malicious code...

MAL-2025-21514 Malicious code in glacier-cherry-ket500-project (npm)

The package glacier-cherry-ket500-project was found to contain malicious code...

MAL-2025-16968 Malicious code in cherry-zenith-p6qf (npm)

The package cherry-zenith-p6qf was found to contain malicious code...

CVE-2025-54063

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code execution vulnerability through the custom URL handling. An attacker can exploit this by hosting a malicious website or embedding a specially crafted URL on a...