EmEditor Editor Website Hacked to Deliver Infostealer Malware in Supply Chain Attack

Cybersecuritynews •Tushar Subhra Dutta • December 30, 2025

A major supply chain attack targeting EmEditor, a widely used text editor software, has exposed millions of users to sophisticated infostealer malware. Between December 19 and December 22, 2025, the official EmEditor website fell victim to unauthorized modification, serving compromised installer files to unsuspecting users during a critical four-day window. The company confirmed that users […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

EmEditor Supply Chain Attack Distributes Infostealer Malware EmEditor, a text and code editing tool, was compromised in a supply chain attack that led to the distribution of infostealer malware. The malicious installer was delivered through the official EmEditor website's download button, affecting users who downloaded the software during the attack. 4 sources 67

EmEditor Editor Website Hacked to Deliver Infostealer Malware in Supply Chain Attack

The full story

Extracted Entities

Attack Types (2)

Platforms (1)