Vanced was Malware all along

14 points by zeepzeep ↗ HN
Google Play Protect now detects Vanced Manager as malware.

Sure google, seems legit.

https://www.androidpolice.com/google-play-protect-vanced-manager-app/

7 comments

[ 3.3 ms ] story [ 27.4 ms ] thread
How could we know that it’s not? Have they published any source code that can be independently built and audited?
I'm curious about this too because virtually every "APK DOWNLOAD" site and non-official APK provider for it embeds malware/adware of some sort. I am wondering how many are actually using a good build and how many are just getting misled by the first result they find.
Searching YouTube Vanced or just Vanced both return the official site as the top result.
I get vanced-manager(com) and apkpure in the top 3 along with the official site.

There is no download link on the official site, and the type of end user that would usually use this does not know what a hash or signature is.

If it were true, it could be a situation like that of The Great Suspender extension.
I mean these sorts apps being taken down and easily replaced are ripe for have malware sneakily inserted into the replaced version because there’s suddenly huge demand for the app.