Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by ...
The program is a free text and code editor that's been downloaded millions of times. The compromise began in June and is ...
The attacks came from a third-party and not from the Notepad++ team.
State-backed attackers hijacked Notepad++ update traffic via a hosting provider breach, redirecting users to malicious downloads since June 2025.