The third party hosting provider had nothing to do with package integrity, that was under Notepad++ control and basically they had none. The real issue is every company or application creating their own Internet update system.
A little tongue-in-cheek, but it's also an issue with windows, that it's owned by an untrustworthy company.