SmartTube YouTube app for Android TV breached to push malicious update

The library runs silently in the background without user interaction, fingerprints the host device, registers it with a remote backend, and periodically sends metrics and retrieves configuration via an encrypted communications channel.

Are we sure this isn’t Google Play Services?

Fucking hell. I just installed this last week on my mom’s Fire TV for her so she’s not inundated with ads.

I’ll have to check which version I have on my TV when I get home.