https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/
From what I can gather, if you have not been compromised yet and you update to the newest version, you're in the clear.
I was afraid this was one of those things where it used the exploit to then put something on the computer by default. It sounds like the perps wanted to fly low and only hit the people that mattered.
Not mattering comes in handy most of the time
>> Not mattering comes in handy
Security through obscurity.