BreachWatch™: Notepad++ update infrastructure compromise (Chrysalis)

February 2026 • Incident type: Supply-chain / update-delivery infrastructure compromise (hosting-provider layer), with selective redirection of update traffic. • Operational impact: Targeted users who updated via the built-in updater could be served trojanized installers from attacker-controlled servers (not a Notepad++ source-code compromise) • Malware delivered: A custom backdoor dubbed “Chrysalis” (plus additional tooling reported by…