That's not how signing works. Also, if the signing is indeed implemented correctly, then the updater cannot have been compromised earlier.