A beloved YouTube alternative just got caught in a serious controversy — and this time, it’s about hidden malware. If you’ve used SmartTube on your Android TV or Fire TV recently, you might want to pay close attention. What started as a simple signature leak has turned into a full-blown security nightmare. And here’s the part most users never saw coming... the app’s build system itself was compromised.
TL;DR (in plain terms):
- SmartTube, the highly popular third-party YouTube app recently removed from Android TV and Fire TV, was found to contain malware after the developer’s build computer got hacked.
- Some official versions released earlier this month were unintentionally infected.
- A fresh, clean version of SmartTube is now available for safe download.
- Anyone who installed one of the compromised versions should reset their devices and carefully review their Google and YouTube accounts for anything suspicious.
Last week, Google Play Protect blocked SmartTube after its app signature was leaked — and that seemed like the end of the story. But a new report from AFTVnews reveals that the situation runs deeper than expected. The leak wasn’t just a minor technical issue; it was part of a broader hack.
According to the developers, the system used to compile SmartTube's official APKs had been infected with malware. That means some of the legitimate releases uploaded to trusted platforms were, in fact, carrying hidden malicious code. They haven’t yet pinpointed when it began, but the breach likely happened in early November. Specifically, versions 30.43 and 30.47 hosted on APKMirror were flagged as unsafe, triggering Google and Amazon to block the app outright.
After discovering the compromise, the developers completely wiped the infected computer and built a fresh, isolated environment to ensure safety. They also created a new app signature to prevent any further tampering. The first secure version from this fresh start, build 30.56, is now live.
If you want to get the safe version, you can download it using AFTVnews’ Downloader app with the following codes:
- Stable release: 28544
- Beta release: 79015
It’s worth noting that this latest version isn’t yet posted on SmartTube’s official GitHub page, as developers are fixing a few remaining issues before making it public. Out of caution, all previous app versions have been removed.
Should users panic? Not quite — but caution is crucial.
The malware’s exact capabilities aren’t fully known yet. The good news is SmartTube doesn’t require full account logins or deep permissions, so your core Google data should be safe. Even if you linked Google Drive backups, the malware likely couldn’t access that data directly. Still, since SmartTube interacts with YouTube account controls, there’s a small chance permissions could have been affected.
That’s why AFTVnews and security experts strongly advise factory resetting any affected device, checking your Google account’s permission list, and reviewing your YouTube activity logs for anything odd before reinstalling the newly verified SmartTube build.
Here’s a thought to stir discussion: Should users trust third-party apps that provide premium features missing from official platforms, or do convenience and open access come with inevitable risks? Share your thoughts — are you sticking with SmartTube, or is this the final straw?
