State-backed attackers hijacked Notepad++ update traffic via a hosting provider breach, redirecting users to malicious ...
Attackers had specifically delivered malware to systems using the Notepad++ updater. Investigations point to state actors.
State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...
A Chinese-linked cyberespionage group targeted Notepad++'s update process to deploy malware. The attack from June to December 2025 selectively affected users, prompting investigations. Hosting ...
A months-long supply chain attack that affected the Notepad++ update process has been linked to a compromise of shared hosting infrastructure rather than a flaw in the software's code. This according ...
The popular Notepad alternative was hijacked by bad actors for several months in 2025, but the latest update appears to solve the issue.