Chinese State Hackers Turned Notepad++'s Own Update System Against Users for Six Months

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

State-Sponsored Hackers Compromise Notepad++ Update Mechanism Notepad++ has been hijacked by state-sponsored hackers, specifically a likely Chinese threat actor. The attackers compromised the software's update mechanism between June and December 2025, allowing them to redirect users to malicious servers by exploiting a flaw in update package validation. 100 sources 60