In early February 2026, the open‑source world was shaken when the official Notepad++ update servers were hijacked in a sophisticated supply chain attack. For nearly six months, from June to December 2025, threat actors infiltrated the infrastructure that delivers automatic updates to users and quietly redirected targeted systems to malicious download servers.  Rather than exploiting…