This is bad. Notepad++ has wide use in businesses large and small, which is likely why it was targeted.

Secondly, update mechanisms are very, very difficult to get right, because we have heard this story time and again.

[dupe] Discussion here: https://news.ycombinator.com/item?id=46851548