Oh, did I mention that that file does not even exist – for 2 month now? 🤦♂️ So even if it would have been malicious: a timely warning for those who trust that snake oil, would you agree? How often do they update, I wonder…
Of course the review failed (as usual, without a notification mail). Now they pick random APK files: remove one, then it's the next. Until the repo is empty, I guess. Snippet updated.
Disable "Safe" browsing, it's snake oil as you can see. We've been libeled now many times, always false positives. See https://gitlab.com/-/snippets/4909577#notes-on-how-to-disable-google-safebrowsing-in-browsers-on-android for how to disable it.
Of course all our APKs have been scanned, multiple times, with many engines. They're clean. Says even G's own scanner.
If you have a fediverse account, you can quote this note from your own instance. Search https://floss.social/users/IzzyOnDroid/statuses/116239722036950446 on your instance and quote it. (Note that quoting is not supported in Mastodon.)