Tech Alert: Notepad++ Hack, Firefox AI Switch, and Raspberry Pi Price Hike!

Notepad++ users were urged to check their systems after the application's servers were compromised for six months, potentially allowing hackers to distribute malicious updates. The attack, which began in June 2025 and lasted until December 2025, involved a compromise of the application's update infrastructure, according to a post on the official notepad-plus-plus.org site on Monday.

Developer Don Ho stated that the attackers were likely a Chinese state-sponsored group. "I deeply apologize to all users affected by this hijacking," Ho wrote in the post. The attackers were able to intercept and redirect update traffic intended for notepad-plus-plus.org, Ars Technica reported.

The compromise allowed the malicious actors to deliver backdoored versions of the text editor to select targets. Users who unknowingly downloaded these updates may have had their systems compromised. The developer urged users to verify the integrity of their Notepad++ installations.

The incident highlights growing concerns about software supply chain attacks and the potential for state-sponsored actors to exploit vulnerabilities in widely used applications.