Script to check if Notepad++ is backdoored by Lotus Blossom APT
Contribute to nHunter0/Notepad-vulnerability-checker development by creating an account on GitHub.
Script to check if Notepad++ is backdoored by Lotus Blossom APT launched on February 17, 2026 with 11 votes, #985 of 16,627 launches that month and more than 90% of that year's launches.
In plain words
This script checks whether Notepad++ has been compromised by the Lotus Blossom APT group. It analyzes the text editor installation to detect signs of backdoor implants associated with this threat actor. The tool is designed for security-conscious users and system administrators who want to verify the integrity of their Notepad++ installation and ensure it has not been tampered with by malicious actors.
written from the facts on this page · September 2026
From the sources
PowerShell script to check Windows machines for indicators of compromise from the Notepad++ supply chain attack (June - December 2025) attributed to Lotus Blossom APT. The attack hijacked Notepad++ update infrastructure to deliver the Chrysalis backdoor. Patched in Notepad++ v8.8.9 (December 2025). # Basic scan powershell - ExecutionPolicy Bypass - File chrysalis_check.ps1 # Extended scan (also checks Downloads, Temp, ProgramData) powershell - ExecutionPolicy Bypass - File chrysalis_check.ps1 - DeepHashScan # Save results to file powershell - ExecutionPolicy Bypass - File chrysalis_check.ps1 - NoColor > results.txt The script is read-only and does not modify your system. Exit code 0 =…from github.com
Does a similar job
all alternatives →
Notemac++ – A Notepad++-inspired code editor for macOS and the webFeb 2026 · github.com · ▲5A powerful Notepad++ inspired text & source code editor for macOS and Web. 73+ languages with Compile & Run, Git integration, AI assistant, hex editor, shortcut presets, terminal, plugins. Built with React, Monaco, TypeScript. - sergioadevita/notemac-plus-plus
AttackerViewFeb 2026 · attackerview.com · ▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Notepad.mx – web based notepad with no logins and complete encryption2024 · github.com · ▲10:page_facing_up: Web-based application for storing notes securely. Built with Vue + Node.js + Express - Athlon1600/notepad
I built a PR listener and ruleset to detect malicious code in CI/CD2025 · github.com · ▲13I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
More dev tools this month
the category →
Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.
Dev tools · 1d ago · github.com
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 29d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 27d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 24d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 22d ago · talanoa.email
Source: Show HN post ↗
Launched alongside, February 2026
the whole month →
Lovon AI Therapy▲801Feel closer and have more fun with your partner every day!
AI · Feb 2026 · lovon.app
Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.
Work · Feb 2026 · wallstreetraider.com