{
  "id": "b3f23a6bbc84",
  "url": "https://notepad-plus-plus.org/news/hijacked-incident-info-update/",
  "title": "Notepad++ Hijacked by State-Sponsored Hackers",
  "note": "Wow, the duration and potential of this attack is truly pretty scary. \n\n> According to the analysis provided by the security experts, the attack involved infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic destined for notepad-plus-plus.org. The exact technical mechanism remains under investigation, though the compromise occurred at the hosting provider level rather than through vulnerabilities in Notepad++ code itself. Traffic from certain targeted users was selectively redirected to attacker-controlled malicious update manifests.\n\nThis started in June 2025 and persisted through December 2025. For six months Notepad++ updates were being actively exploited. This is yet another example of software supply chain attacks. These have become somewhat regular. They can be defended against pretty effectively by using signing certificates. However, that typically also gets you in some form of an App Store or other \"signed\" distribution channel.\n\nShort of that though, software developers could still use their own signing authority to insure that the signed app they have out there will only update itself with a similarly signed app.",
  "voice": "mixed",
  "saved": "2026-02-05T22:51:14Z",
  "host": "notepad-plus-plus.org",
  "kind": "page",
  "tags": [],
  "record": "https://links.thingelstad.xyz/links/b3f23a6bbc84/",
  "markdown": "https://links.thingelstad.xyz/links/b3f23a6bbc84.md",
  "issues": [
    {
      "number": 340,
      "slug": "340",
      "title": "Weekly Thing 340 / Moltbook, Frontier, Poster",
      "date": "2026-02-08T14:44:36.479380Z",
      "section": "Notable",
      "position": 4,
      "url": "https://weekly.thingelstad.com/archive/340/",
      "page": "https://links.thingelstad.xyz/issues/340/"
    }
  ],
  "connections": {
    "same_host": {
      "count": 0,
      "page": "https://links.thingelstad.xyz/hosts/notepad-plus-plus.org/",
      "nearest": []
    },
    "same_week": {
      "count": 18,
      "nearest": [
        {
          "id": "7913a47da3d5",
          "title": "The New Announcement Economy – On my Om",
          "url": "https://om.co/2026/02/02/openai-and-the-announcement-economy/",
          "record": "https://links.thingelstad.xyz/links/7913a47da3d5/"
        },
        {
          "id": "cd4fc396e76e",
          "title": "Two kinds of AI users are emerging. The gap between them is astonishing. - Martin Alderson",
          "url": "https://martinalderson.com/posts/two-kinds-of-ai-users-are-emerging/",
          "record": "https://links.thingelstad.xyz/links/cd4fc396e76e/"
        },
        {
          "id": "370e3b882fae",
          "title": "Introducing the ENS App Alpha | ENS Blog",
          "url": "https://ens.domains/blog/post/ens-app-alpha",
          "record": "https://links.thingelstad.xyz/links/370e3b882fae/"
        },
        {
          "id": "b065ce914cd8",
          "title": "Pick your agent: Use Claude and Codex on Agent HQ - The GitHub Blog",
          "url": "https://github.blog/news-insights/company-news/pick-your-agent-use-claude-and-codex-on-agent-hq/",
          "record": "https://links.thingelstad.xyz/links/b065ce914cd8/"
        },
        {
          "id": "2fc995fb7c32",
          "title": "BlogBook — WordPress, Micro.blog, or Ghost → Markdown Book",
          "url": "https://blogbook.my/",
          "record": "https://links.thingelstad.xyz/links/2fc995fb7c32/"
        }
      ]
    },
    "mentions": [],
    "mentioned_by": [],
    "saved_twice": []
  },
  "elsewhere": {
    "wayback": "https://web.archive.org/web/*/https://notepad-plus-plus.org/news/hijacked-incident-info-update/"
  }
}