526
Notepad++ Hijacked by State-Sponsored Hackers
(notepad-plus-plus.org)
This is a most excellent place for technology news and articles.
Three times++, actually. The second attack was documented to have resumed after the third, with different payload URLs.
https://securelist.com/notepad-supply-chain-attack/118708/
I think I was remembering the CIA Wikileaks one which was a compromised DLL.