You can infect your PC with malware without ever leaving Notepad, thanks to recent updates and additions. Hooray.
Notepad++ update servers were compromised for 6 months in 2025. Learn how the Chrysalis backdoor targeted users and why you must manually update to version 8.9.1 now.