Notepad++'s update service was compromised by state-sponsored attackers from June through December 2025. The attackers selectively redirected targeted users to malicious update manifests after compromising the hosting server. Security researchers attribute the attack to a Chinese state-sponsored group based on the selective Show more