The Dutch NCSC on the Notepad++ update hijack attacks:

"Currently, as far as is known, only organizations with interests in East Asia are victims of targeted attacks"

cc: @GossiTheDog