Notepad++ hit by suspected Chinese state-sponsored hackers - here's what we know so far

Hacker hands at work with interface around.

---

• Notepad++ targeted in sophisticated supply-chain style attack via compromised hosting server
• Attackers delivered tainted updates to select victims, exploiting weak update verification controls
• Breach lasted from June to December 2025, likely tied to Chinese state-sponsored actors, prompting migration to new hosting and hardened update verification