Notepad++ updates got hijacked for months and could have spied for China
Notepad++ hosting servers were hijacked June–December 2, 2025, allowing targeted users to receive malicious updates that likely enabled remote keyboard access by Chinese state-sponsored hackers.
5 ways to spot software supply chain attacks and stop worms - before it's too late
Shai-Hulud is an ongoing, widespread npm software supply-chain worm attack compromising JavaScript packages and posing a major security crisis for JavaScript developers.
