SMARTTUBE YOUTUBE APP FOR ANDROID TV BREACHED TO PUSH MALICIOUS UPDATE

Summary from the TLDR InfoSec newsletter

The popular open-source SmartTube YouTube client for Android TV, which provides ad blocking and runs well on low-powered devices, was compromised after an attacker gained access to the developer's signing keys. The compromise was detected when multiple users reported that Play Protect blocked SmartTube. The app developer confirmed that his digital keys were compromised and stated that he had revoked the old signature and would publish a new version with a separate app ID.