Last year, the creator of Notepad++ rolled out an update for the text and source code editor after security experts reported ...
The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.
Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked ...
State-sponsored hackers' are being blamed for compromising the popular alternative to Windows Notepad over a period of six ...
The developer did not specify when they became aware of the attack, but said that “all attacker access was definitively terminated” by December 2nd. The Notepad++ updater has been updated itself with ...
It's believed that, between June and November 10/December 2, 2025 (independent security experts and its hosting provider disagree on the exact timings), a shared hosting server was compromised, ...
A software update mechanism for the popular text editor Notepad++ was hijacked by suspected Chinese state-sponsored hackers, allowing them to silently redirect some users to malicious update servers, ...
Notepad++ targeted and used to deliver poisoned updates to a select group of victims.
Notepad++ users faced a serious threat as Chinese state-sponsored hackers compromised update servers for half of 2025, ...