tl;dr A network operator can perform a MitM attack on the built-in updater’s call-out checking for updates by faking the Notepad++ update website, telling it a new version is available at <malware URL> and then downloading and running the malware
It requires a malicious network operator, or preexisting malware on the host.






I just finished Star Trek: Resurgence on Nintendo Switch. Don’t sleep on this game if you want a well-written classic 90s Trek feeling adventure game! Very Tell Tale like.
The graphics aren’t amazing and quicktime events are occasionally awkward, but the story and choice opportunities make it a lot of fun for some casual playtime!