#Notepad++ supply chain attack

Chinese state hackers controlled Notepad++ update infrastructure for six months, selectively targeting users with backdoored versions while others received clean updates.