Notepad++ updates got hijacked for months and could have spied for China

Source: The Verge

Details

Users of the text and code editor Notepad++ may have unknowingly downloaded a malicious update for the app after its shared hosting servers were hijacked last year. On Monday, the app’s developer, Don Ho, posted an update on the attack with more details, including that the hackers were “likely a Chinese state‑sponsored group” and that the malicious code was inserted into the installer package hosted on the compromised server.