Suspected China-state hackers used update infrastructure to deliver backdoored version.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 9 months ago (1 child)

The downloads themselves are signed—however some earlier versions of Notepad++ used a self signed root cert, which is on Github. With 8.8.7, the prior release, this was reverted to GlobalSign.

  • source
  • parent
  • hideshow 1 child comment