Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by ...

State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...

Who isn't by now?

Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked updates, fixed in v8.8.9 ...

Chinese state-sponsored threat actors were likely behind the hijacking of Notepad++ update traffic last year that lasted for almost half a year, the developer states in an official announcement today.

Notepad++ users faced a serious threat as Chinese state-sponsored hackers compromised update servers for half of 2025, distributing malware named Chrysalis. Targeting organizations with East Asian ...

The program is a free text and code editor that's been downloaded millions of times. The compromise began in June and is ...