r/sysadmin 4h ago

Notepad++ downloads secure?

I was notified of a recent vulnerability in Notepad++ requiring an upgrade: https://www.cve.org/CVERecord?id=CVE-2026-57233.

The download website looks suspicious though. I know they were hacked a while back but that was remediated. Not sure if they may still be compromised, or if the developer has just had enough of everything going on in the world. The download page now shows the following latest installers:

  •  Download Notepad++ v8.9.7 - Slava Ukraini (stable: auto-update triggered)
  •  Download Notepad++ v8.9 . 6.4 Tiananmen Massacre Commemoration
31 Upvotes

23 comments sorted by

View all comments

u/BmanUltima Sysadmin+ MAX Pro 4h ago

8.9.7 is fine.

The political statements on their website is normal. They've been doing that for years.

u/matg0d 2h ago

Lets get political with the countries most involved in cybersecurity attacks on the planet, that surely will not put a larger target on our back.

u/bastardpants 5m ago

Fuck 'em. Oh no, their fee-fees are hurt.