Update Your Notepad++

[SactoDoug]

For those who use Notepad++, its update servers were compromised by the CCP late last year. If you updated it any time during the last half of 2025, there is a chance you might have downloaded malicious code. Notepad++ has since removed the malicious code and hardened their infrastructure to prevent it from happening again. Update your Notepad++ asap if you might have gotten the bad updates.

[arrix]

Was a pretty sophisticated MITM attack. Thankfully I've not updated my version for over 3 years. lol

[Reno-Kid]

This is crazy. It's not compromised code, but how it was done. Seems they can intercept and redirect targeted traffic.


According to the analysis provided by the security experts, the attack involved infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic destined for notepad-plus-plus.org. The exact technical mechanism remains under investigation, though the compromise occurred at the hosting provider level rather than through vulnerabilities in Notepad++ code itself. Traffic from certain targeted users was selectively redirected to attacker-controlled malicious update manifests.