TLDR: Super targetted supply chain attack on certain high profile business users, not everyday users, who are probably fine. New N++ version contains a security fix to prevent this in the future.