An in‑depth look at a malicious Notepad++ supply chain attack, including threat hunting methodology, attacker tradecraft, and actionable detection insights based on real‑world IOCs.