From the second article:

But I’m not on Bluesky and I don’t have any plans to join it anytime soon. I wrote about this in 2023: I will never again devote my energies to building up an audience on a platform whose management can sever my relationship to that audience at will

https://fedi.tips/

Do we know what the hacked version of the app actually did after installed? For example, did it send all opened files back to some server owned by the hackers?