DemBoSain comments on Notepad++ hijacked by state-sponsored hackers

submitted 6 months ago by pylapp@programming.dev [M] to c/opensource@programming.dev

5 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] DemBoSain@midwest.social 1 point 6 months ago (1 child)

It wasn't specifically notepad++ code, but a custom-written updater. That's why it was connecting to the internet.

parent

[–] village604@adultswim.fan 2 points 6 months ago

I mean, it is n++ code because the updater is part of the code base. They just didn't have the connection to the update server hardened.

This was patched in like December, though.

parent

lemmy:	0.19.20
mlmym (mschae):	26.3.4