Notepad++ hosting breach enables update supply chain attack
Notepad++'s hosting infrastructure was compromised and its update channel was abused to distribute malware. It was reportedly exposed to the supply chain attack for six months. The attack was attributed to China-linked state-sponsored hackers.
Key facts
- Affected organisation
- Notepad++
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- Update supply chain exposed to attack for six months
- Cause / method
- Supply chain attack that compromised hosting infrastructure to hijack the update channel
- Location
- Other countries
Timeline
- A supply chain attack on Notepad++ updates via a compromised hosting provider came to light.
- It emerged that Notepad++ had been exposed to the supply chain attack for six months.
- Further details of the Notepad++ supply chain attack were disclosed.
6 related reports
- Notepad++ users take note: It’s time to check if you’re hacked
- Notepad++ Supply Chain Hack Conducted by China via Hosting Provider
- Nation-state hack exploited hosting infrastructure to hijack Notepad++ updates
- 업데이트가 악성코드 통로로…‘노트패드++’ 6개월간 공급망 공격 노출
- Cybersecurity Weekly Newsletter - Notepad++ hack, Office 0-Day, ESXi 0-day Ransomware Attacks and More
- 생각보다 복잡했던 노트패드++ 해킹의 ‘공급망 공격’ 전황 드러나다
Other incidents at Notepad++
Notepad++ software updates hijacked for months
Notepad++ said on 2 February 2026 that Chinese government hackers had hijacked its software updates for months. The specific scale of damage and response measures have not been confirmed.
Related reports: 2 →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.