[Saris]

What OS doesn't have a package manager now? Windows, Linux, and MacOS all have their own systems.

On windows, the package manager downloads the release of notepad++ directly from github, so it would not have been compromised. The hijack was done on the notepad++ website at the webhost level as I understand it, and the built in updater pulled from there.