chrysalis backdoor

Notepad++ users were quietly targeted in a months‑long supply‑chain campaign that did not break the editor’s source code but instead abused its update infrastructure: attackers intercepted and selectively redirected update traffic for certain users between June and December 2025, delivering a...