[smartties]

Another malicious developer most likely used his source code and republished/spammed the Google play store with the said reskin. The original developer, is now associated with the malicious developer and has his account terminated. It's not the first time an open source project gets removed from the Google store for "prior violations of the developer program policies".

[autoexec]

When I read the privacy policy for the Samsung keyboard pre-installed on my phone and started following the links I was shocked that it was a literal keylogger sending every key press to 3rd parties who said they would use it read every word and phrase I typed to try to guess what my interests were, who I was communicating with, and what my level of cognitive ability/education was! I'd had no idea. Replaced my keyboard immediately.

If an app logged your keystrokes and sent that data to some poor guy in a 3rd world country though Google would shut them down. Samsung is still allowed to host apps on the play store though. In both cases the data being collected will be leveraged against you. Google just doesn't care about malware if the developer is rich enough.

[skoskie]

If a company sold me a device with a keylogger installed on I would never buy anything from that company again. I would also not let that device on my network, ever.

[senectus1]

what did you replace the keyboard with?