Vanced was Malware all along

[zeepzeep]

Google Play Protect now detects Vanced Manager as malware.

Sure google, seems legit.

https://www.androidpolice.com/google-play-protect-vanced-manager-app/

[pwdisswordfish9]

How could we know that it’s not? Have they published any source code that can be independently built and audited?

[ev1 → pwdisswordfish9]

I'm curious about this too because virtually every "APK DOWNLOAD" site and non-official APK provider for it embeds malware/adware of some sort. I am wondering how many are actually using a good build and how many are just getting misled by the first result they find.

[jjeaff → ev1]

Searching YouTube Vanced or just Vanced both return the official site as the top result.

[ev1 → jjeaff]

I get vanced-manager(com) and apkpure in the top 3 along with the official site.

There is no download link on the official site, and the type of end user that would usually use this does not know what a hash or signature is.

[jeffybefffy519]

I mean these sorts apps being taken down and easily replaced are ripe for have malware sneakily inserted into the replaced version because there’s suddenly huge demand for the app.

[wanderer_]

If it were true, it could be a situation like that of The Great Suspender extension.

[cuteboy19]

Does it trigger Virustotal