Notepad++ released version 8.8.9 in December, which checks digital signatures and certificates before installing any updates.
The popular Notepad alternative was hijacked by bad actors for several months in 2025, but the latest update appears to solve the issue.