A likely Chinese state-sponsored threat actor compromised Notepad++ update infrastructure between June and December 2025, hijacking update traffic without exploiting the codebase.
🇪🇸Spain - PcComponentes
A threat actor using the alias daghetiaw claims to have breached PCComponentes.