It's believed that, between June and November 10/December 2, 2025 (independent security experts and its hosting provider disagree on the exact timings), a shared hosting server was compromised, ...

Don Ho, the developer of Notepad++, says 'malicious actors' had targeted the update process for 'certain targeted users' beginning in June 2025 ...