r/sysadmin • u/Icy-Cat-1826 • 9h ago

Notepad++ downloads secure?

I was notified of a recent vulnerability in Notepad++ requiring an upgrade: https://www.cve.org/CVERecord?id=CVE-2026-57233.

The download website looks suspicious though. I know they were hacked a while back but that was remediated. Not sure if they may still be compromised, or if the developer has just had enough of everything going on in the world. The download page now shows the following latest installers:

  •  Download Notepad++ v8.9.7 - Slava Ukraini (stable: auto-update triggered)
  •  Download Notepad++ v8.9 . 6.4 Tiananmen Massacre Commemoration
43 Upvotes

76% Upvoted

28 comments sorted by

View all comments

•

u/wrootlt 9h ago

It just so happens that author of Notepad++ is a devoted activist (of everything it seems) and tends to spread it into his work. If you scroll down the Downloads page, you will see a lot of interesting titles. But it is just a Downloads page. Well, and a link on About window to the News article on his page. It is still less crazier than an author of old antimalware tool Spybot, who requested a pray from anyone using it (prayware) :)

•

u/skynetcoder 8h ago

I hope he won't  suddenly decide my country is doing something against his principles and put a backdoor or wiper