#supply-chain-attack

Chinese government-linked hackers compromised Notepad++ updates from June to December 2025, targeting organizations with East Asian interests. A wake-up call for open source security.