State-Sponsored Hackers Hijack Notepad++ Updates for Months

Paris, Monday, 2 February 2026.
A six-month infrastructure breach allowed Chinese state actors to selectively deliver malicious software updates, targeting specific organizations while remaining undetected by the developers until December.