likely a Chinese state-sponsored group,

On the road to fully automated luxury gay space communism.
Spreading Linux propaganda since 2020
Rules:
likely a Chinese state-sponsored group,

Reminder that this person has previously named one of their releases "Stand with Hong Kong" to stand with the western backed color revolution. They are a shit-lib. Still not bad software for Windows but obviously you should be careful with anything that does updates.
Yeah but it's better than notepad
Chud dev gets owned
..AGAIN. This is the SECOND time NP++ has been hacked. The first time was ACTUALLY the CIA and not a made up state hacker.
Notepad++ has been a problematic software for way too many reasons, that I gave it up some while ago, thankfully.
Glad I stopped using it because of its pro-ukronazi stance.
they're CIA-controlled. They were caught with CIA backdoors.
"Our benevolent covert national security organization versus their barbaric state-sponsored hackers" 
Not that I don't believe it given their pro-Hong Kong riots, apparently pro-Ukro-nazi stance but got any specific receipts I can bookmark?
You just have to look at the release titles.

Support Taiwan's return to the UN.
Taiwan was never in the UN. The Republic of China, representing China, was. And was replaced by the PRC representing China.
ⓘ This user is suspected of being a cat. Please report any suspicious behavior.
cringe
Cringe
Them having CIA backdoors is public info. Companies being openly pro state-department policies is a huge red flag. They usually try to stay quiet. Proton is another example of CIA-ran company. Proton AG.
Do you mean this? https://notepad-plus-plus.org/news/v733-fix-cia-hacking-npp-issue/
The actual exploit was available as part of some leaks but the source is a super common issue on windows.
And that is why applications shouldn't handle their own updates

What alternatives would y'all recommend?
ed is lightweight and distraction free. That is why I always use ed.
ⓘ This user is suspected of being a cat. Please report any suspicious behavior.
Sublime or VSCodium (because it doesn't have copilot)
Kate editor or Lapce, both FOSS.
Emacs
vim? neovim?
It's surprising that this isn't a common headline. Too many windows programs have worse issues than this, updating over unencrypted HTTP and with no integrity checks at all
I don't really want to insult Winblows too hard here, supply chain attacks are possible with any imperfectly secured software on any OS, but... yeah, you hear a lot more about this kind of thing with Winblows software.
ed is the standard text editor
When I use an editor, I don't want eight extra KILOBYTES of worthless help screens and cursor positioning code! I just want an EDitor!! Not a “viitor”. Not a “emacsitor”. Those aren't even WORDS!!!! ED! ED! ED IS THE STANDARD!!!
TEXT EDITOR.
Oh shit
Didn't this happen before? Like several years ago it was hacked by the CIA