Back to today’s briefing

Story perspectives

Chinese Hackers Compromise Notepad++ Updates, Urge Immediate Upgrade

2/3/2026

35 6 Full Breakdown

Summary

Story summary

Notepad++ confirmed that hackers linked to the Chinese government hijacked its update mechanism from June to December 2025, delivering malicious updates to targeted users.
Developer Don Ho says the attack exploited hosting provider–level vulnerabilities, allowing attackers to redirect update traffic to their servers.
Notepad++ migrated to a new hosting provider, strengthened update verification, and urged users to download version 8.9.1 or later.

1 of 1

Story summary

Notepad++ confirmed that hackers linked to the Chinese government hijacked its update mechanism from June to December 2025, delivering malicious updates to targeted users.
Developer Don Ho says the attack exploited hosting provider–level vulnerabilities, allowing attackers to redirect update traffic to their servers.
Notepad++ migrated to a new hosting provider, strengthened update verification, and urged users to download version 8.9.1 or later.