Laut Notepad++ haben chinesische Regierungshacker monatelang seine Software-Updates gekapert

While the original vulnerability has been fixed, does this mean that anyone who used the built-in updater while the attack was active should consider their PC compromised now? The attackers could have done anything while they had access, including installation of additional malware.

Lol the developer had not implemented basic security measures (checking digital signatures of updates) so it’s also partly on him