#apt

Six Months of Chrysalis: How Chinese State Hackers Turned Notepad++ Into a Spy Tool

Lotus Blossom hijacked Notepad++'s update infrastructure for half a year and nobody noticed until a bug fix quietly mentioned 'updater hardening.'