another day, another reminder that "free" software can be a very expensive habit. open source isn't automatically secure, folks. https://securelist.com/notepad-supply-chain-attack/118708/