
Notepad++ Developer Reveals Chinese Government Hackers Compromised Update Mechanism for Months
SecurityChinacybersecurityNotepad++open-sourcesupply-chain-attackSolarWinds
The developer of Notepad++ has disclosed that hackers linked to the Chinese government compromised its update mechanism to distribute malicious versions of the software for several months. The attack targeted users of the open-source software through the official update channel. No specific dates or exact duration of the compromise are mentioned. Technical details about the infection method or the malicious payloads deployed are not provided. The impact potentially affects all users who performed updates during the affected period.