plain-app icon indicating copy to clipboard operation
plain-app copied to clipboard

Google Play Protect flagging app as harmful

Open coderkei opened this issue 1 year ago • 4 comments

Describe the bug Google play protect is flagging this app as harmful

To Reproduce Steps to reproduce the behavior:

  1. Install or update the app directly from github releases with play protect enabled.
  2. The message will appear. This will also show as a notification.

Expected behavior For this to not occur, presumably its a false positive but still a concern

Screenshots Screenshot_20240701_225538_Google Play Store

Desktop (please complete the following information):

  • OS: N/A
  • Browser N/A
  • Version N/A

Smartphone (please complete the following information):

  • Device: Samsung Galaxy S21
  • OS: Android 14
  • App Version: 1.3.3

Additional context Any idea why its being flagged? I assume its a false positive. Not sure if the F-Droid build is affected as this was with the github release build.

coderkei avatar Jul 01 '24 21:07 coderkei

The issue was resolved after rebuilding the APK. (root cause is still unknown)

Possible reason:

Obfuscation: Heavy obfuscation of the code can sometimes trigger Play Protect, as it might be seen as an attempt to hide malicious behavior.

ismartcoding avatar Jul 02 '24 06:07 ismartcoding

I believe Google Play Protect utilizes results from multiple file scanning platforms. It's absurd that some file scanning platforms label apps as malicious based solely on the permissions they request.

image

image

ismartcoding avatar Jul 06 '24 01:07 ismartcoding

So if we are using the GitHub release version we can just ignore the flagging? I tried uninstalling and reinstalling multiple times but the bug is still present. I would like to be able to use the latest version since the one packaged for f-droid is older. I hope Google will fix their problems.

torbato avatar Jul 06 '24 13:07 torbato

Version 1.3.4 is identical to 1.3.3; the only change made was an increase in version number to test Google Protect.

ismartcoding avatar Jul 06 '24 13:07 ismartcoding