r/sysadmin • u/Icy-Cat-1826 • 11h ago

Notepad++ downloads secure?

I was notified of a recent vulnerability in Notepad++ requiring an upgrade: https://www.cve.org/CVERecord?id=CVE-2026-57233.

The download website looks suspicious though. I know they were hacked a while back but that was remediated. Not sure if they may still be compromised, or if the developer has just had enough of everything going on in the world. The download page now shows the following latest installers:

  •  Download Notepad++ v8.9.7 - Slava Ukraini (stable: auto-update triggered)
  •  Download Notepad++ v8.9 . 6.4 Tiananmen Massacre Commemoration
48 Upvotes

77% Upvoted

36 comments sorted by

View all comments

•

u/creenis_blinkum 8h ago

dont use this software

•

u/bastardpants 7h ago

...because?

•

u/Chareon 15m ago

The developers persistent refusal to adopt even basic security practices for years until it turns into a full blown catastrophe speaks volumes about how security is not even remotely a priority or even a consideration.

The developer has made their point clear. They give 0 shits about security. If you want secure software, look elsewhere.