Breach lingered for months before stronger signature checks shut the door

A state-sponsored cyber criminal compromised Notepad++'s update service in 2025, according to the project's author.…