Report it as what, and to who? If you report it as distributing malware when it doesn't it's just crying wolf, and will only take up time from actual malware r

Report it as what, and to who? If you report it as distributing malware when it doesn't it's just crying wolf, and will only take up time from actual malware reporting, or make this less likely to be classed as malware in the future if/when it does distribute it. Reporting it as trademark infringement to the hosting provider under the DMCA is most likely the best course of action, the one most likely to lead to a take down. That's assuming there's a trademark on Notepad++.