Security Incident Reported in Ad-Free YouTube App SmartTube: Users Advised to Stay Alert

SmartTube's release APKs starting with version 30.27 contained an undisclosed native library (libalphasdk.so) that performs background data collection and encrypted transmission; the app's signing key was leaked, leading to Play Protect warnings and blocked apps. The developer revoked the leaked key, issued a new signing key and package name, and published an updated APK on 2025-12-02; affected APK MD5 hashes are provided and users are advised to remove the compromised app and install the new release.