Notepad++ compromised Jun-Dec 2025, get latest ver 8.9.1, 26 Jan 2026

[tom_cellist]

Public service notice!
When moving to Win 11 and finding that MS had added things to Notepad that made it problematic to use for creating a clean .ini file, there were a few solutions, one being some polite hacking of Win11 so that the vintage Notepad would still be available (links down below), and alternatively using Notepad++64, a well known and very capable tool; Bob had mentioned it in the comments within "The Dreaded .ini file". I think also that JMP had a solution in progress, his was the last comment in that thread.

<https://www.sawstudiouser.com/forums/sh ... epad%2B%2B>

And I just saw this new thread & post from GUE
https://www.sawstudiouser.com/forums/sh ... -ini-files


But if you decided to try the Notepad++, I read at Ars Technica today (2 Feb 2026) about a Notepad++ compromise, if the app had been set to auto update (or if you happened to download it in the period Jun to early Dec 2025 ) your machine would probably have the compromised version. The China state-hacker's intended targets was very specific, most likely you are not one of those unless you are enterprise in East Asia, according to the article.

<https://arstechnica.com/security/2026/0 ... 2#comments>

Version 8.8.9 released 9 Dec 2025 is ok, but the latest ver 8.9.1 from 26 Jan 2026 is recommended.

If you have Notepad++, check in Settings/Preferences/MISC. for auto update settings
Check Notepad++ version in ?/About
OT: there are also 32bit x86 and ARM64 versions.

New version 8.9.1 released 26 Jan2026 is available, here is the link, (but maybe don't trust links offered without official certification!)
<https://notepad-plus-plus.org/downloads/v8.9.1/>

One way to fix an issue like this is to reformat and reinstall, not easy, but does tend to remove any questions about system integrity.

Beware of this one that came up in a DDG search, cn domain is China.
*****************************************
notepadplus.com.cn
https://www.notepadplus.com.cn ***8250; en
******************************************

Make the old Notepad work for you, not too much pain, requires some visits into Regedit, but does work for me.
<https://www.windowslatest.com/2025/03/0 ... s-11-24h2/>

Here is a much deeper technical explanation/description of the hacking.
<https://www.rapid7.com/blog/post/tr-chr ... s-toolkit/>

[Dave Labrecque]

Thanks for the heads-up. This thread caught my attention because I just installed Notepad++ in the last week! But I guess that means I'm okay. I just confirmed that it is, indeed, v. 8.9.1.

>>One way to fix an issue like this is to reformat and reinstall, not easy, but does tend to remove any questions about system integrity.<<

You mean wipe the system drive and reinstall Windows? Yikes.

[mr_es335]

Hello,

If you are looking for simple, straightforward text editor, the I suggest, metapad!

[Dave Labrecque]

Isn't Metapad built on the Juce framework? (kidding )