Notepad++ patches update chain after targeted compromise
go.theregister.com
: Breach lingered for months before stronger signature checks shut the door