I might be the only one using it here, but...
https://notepad-plus-plus.org/news/hijacked-incident-info-update/
It was hijacked by Chinese agents last year, between June and December. They redirected the server updates to their own.
Ugh.
Ouch
:(
Thanks for the heads up.
My job has turned into an endless grind of security shit.