Ukraine's Computer Emergency Response Team issued a warning on July 24, 2026, revealing that the Russia-aligned threat cluster UAC-0099 has begun hiding malware inside a counterfeit Notepad++ plugin — ...

Years of using Notepad++ have made me appreciate the text editor even more. It's lightweight, easily extensible, offers advanced text-editing features, and has stuck around even as heavier, more ...

Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish persistence.

Threat actors may abuse Notepad++ plugins to circumvent security mechanisms and achieve persistence on their victim machine, new research from security company Cybereason suggests. “Using an ...

A likely China-sponsored threat actor hijacked Notepad++'s software update mechanism and quietly redirected targeted users of the popular source code editor to malicious downloads for nearly six ...