Notepad++ targeted and used to deliver poisoned updates to a select group of victims.
The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.
Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked ...
The developer did not specify when they became aware of the attack, but said that “all attacker access was definitively ...
State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...
A Chinese-linked cyberespionage group targeted Notepad++'s update process to deploy malware. The attack from June to December 2025 selectively affected users, prompting investigations. Hosting ...
XDA Developers on MSN
Notepad++ has allegedly been spying on targeted users after a malicious update got in
The attacks came from a third-party and not from the Notepad++ team.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results