The program is a free text and code editor that's been downloaded millions of times. The compromise began in June and is likely to have involved a Chinese state-sponsored group.

Notepad++ has adopted a "double-lock" design for its update mechanism to address recently exploited security gaps that ...