Apache Friends Support Forum

Is XAMPP for Windows affected by this compromise?

https://arstechnica.com/information-technology/2019/01/pear-php-site-breach-lets-hackers-slip-malware-into-official-download/

The PEAR installer was compromised for up to 6 month.
XAMPP PEAR is not updated for years (exactly PEAR 1.10.1 (which was released in october 2015) is included in XAMPP 7.3.1
So no, XAMPP should not be compromised by this issue.