Urgent: Notepad++ Hack Alert! Mattermost Code License in Question.

Notepad++ Users Urged to Update After Potential Hack Compromised Software

Notepad++, a widely used text editor, was reportedly compromised for six months, potentially allowing hackers to distribute backdoored versions to select users. The suspected Chinese state-sponsored attack exploited manipulated update channels, raising concerns about software supply chain vulnerabilities.

According to Ars Technica, the attack targeted specific individuals or organizations through compromised software update mechanisms. The report highlighted the potential for widespread malware distribution.

In related news, a licensing issue was reported on Mattermost, an open-source collaboration platform. Issue 8886 on Mattermost's GitHub repository, titled "LICENSE: may be licensed to use source code; incorrect license grant," was opened on May 31, 2018. The issue questioned the accuracy of the license grant for the Mattermost source code. While seemingly unrelated to the Notepad++ incident, it underscores the ongoing challenges in software security and licensing.

The Notepad++ compromise highlights the increasing sophistication of supply chain attacks, where malicious actors target software developers or distributors to inject malware into legitimate software. Users of Notepad++ are strongly advised to update to the latest version immediately to mitigate any potential risk.