Android TV Archives

AppWizard

December 5, 2025

Android TV users hit with SmartTube security disaster after rogue update

SmartTube, a YouTube client for Android TV, experienced a security breach where an attacker infiltrated the developer's signing keys, allowing the distribution of a compromised update that included a malicious library, libalphasdk.so. Google Play Protect issued warnings about the suspicious build, leading users to discover a hidden file that maintained remote communication channels. Users are advised to change Google Account passwords, conduct antivirus checks, and implement stricter firewall rules. The developer, Yuliskov, plans to address the vulnerabilities and release a new version through the F-Droid store.

AppWizard

December 1, 2025

SmartTube YouTube app for Android TV breached to push malicious update

An attacker gained access to the developer's signing keys for SmartTube, an open-source YouTube client for Android TV, leading to a malicious update being distributed. The developer, Yuriy Yuliskov, confirmed the compromise and plans to release a new version with a different app ID. Users reported that Play Protect flagged SmartTube as a potential threat. A reverse-engineered version, identified as 30.51, contained a hidden library named libalphasdk.so, which was not part of the public source code and collected device fingerprints without user knowledge. There is currently no evidence linking the malware to account theft or DDoS attacks, but concerns remain. Yuliskov has announced safe beta and stable test builds on Telegram, but they are not yet on GitHub. Users are advised to stay on older verified builds, avoid logging in with premium accounts, and disable auto-updates. Version 30.19 does not trigger Play Protect warnings, suggesting it may be safer.

AppWizard

December 1, 2025

Popular YouTube app for Android TV ‘SmartTube’ compromised with malware

The developer of SmartTube, an ad-free YouTube client for Android TV, confirmed a security breach involving the app's signing key, which allowed malicious actors to inject harmful code into app updates. The breach was disclosed by Yuriy Yuliskov, the maintainer, who advised users to avoid reinstalling the old app and instead wait for a newly signed version. A reverse-engineering analysis of the infected APKs revealed that they were gathering sensitive information and transmitting it to a remote server. Versions 28.56 to 30.52 were particularly affected, and Google Play Protect began disabling installations of SmartTube. In response, Yuliskov wiped his hard drive and released a new version, 30.56, with a different signing key and app ID. Transparency concerns remain, and the developer plans to disclose details about the breach and measures to prevent future incidents. Users have requested additional security assurances, including hashes of clean builds.

AppWizard

December 1, 2025

That popular YouTube alternative on Android TV was secretly distributing infected builds

SmartTube, a popular YouTube application for Android TV and Fire TV, was removed from these platforms due to malware that compromised the developer's build machine. Some versions released earlier this month contained this malware. Users are advised to reset their devices and review their YouTube and Google account information. Initially, it was thought that a digital signature leak was the reason for the app's removal, but it was later confirmed that the build environment was compromised. The developers are investigating which specific versions were affected, with versions 30.43 and 30.47 flagged as malicious. A new version, build number 30.56, has been released from a secure environment, but previous versions have been removed from GitHub. Users are recommended to perform a factory reset, review account permissions, and check YouTube activity for unusual activity.

AppWizard

December 1, 2025

SmartTube app was infected by malware, here’s what happened

Google Play Protect disabled the SmartTube app on Android TV, labeling it as potentially harmful due to a compromised digital signature. The developer, Yuliskov, confirmed that the signature breach allowed for the creation of counterfeit app versions that could carry malware. A user discovered that SmartTube version 30.51 contained a hidden library that collected device-specific information and transmitted it to external servers, raising concerns about botnet activity. Certain versions of SmartTube, specifically 30.43 and 30.47, were confirmed to have been compromised due to malware on the developer's computer. Users were advised to uninstall infected versions, including 28.56, 28.58, 28.66, 28.75, 28.78, 29.13, 29.37, 29.62, 29.63, 29.85, 30.27, 30.32, 30.38, 30.40, 30.43, 30.44, 30.45, and 30.51, and to download the newly released safe version from trusted sources. Yuliskov assured users that the compromised computer has been cleaned and that new releases are secure.

AppWizard

November 27, 2025

Qobuz: I tested the Android TV app and I was impressed! – Son-Vidéo.com: blog

Qobuz has launched its app on Android Smart TVs, providing high-quality music streaming with lossless sound and high-definition masters. The app features a user-friendly interface optimized for larger screens, allowing easy navigation and access to curated playlists, personalized recommendations, and synchronized library data across devices. It supports Hi-Res audio streaming and includes Qobuz Connect, enabling users to control playback from smartphones or tablets. The app is compatible with Qobuz's Studio and Sublime subscription packages, offering access to over one hundred million titles in Hi-Res quality. Qobuz emphasizes editorial content, including album reviews and artist interviews, enhancing the listening experience with a human touch.

AppWizard

November 27, 2025

PSA: Google has disabled the best YouTube app on Android TV, but for good reason

Google has disabled the SmartTube app on various Android TV devices, including NVIDIA Shield TV, Walmart Onn boxes, and certain Sony and TCL TVs, due to it being flagged by Google Play Protect. The app's developer, yuliskov, confirmed that the app's digital signature was compromised, prompting plans to transition to a new digital signature and app identifier. Users do not need to uninstall the existing version, but the new version will be released as a separate app requiring reconfiguration. Some users have suggested disabling Google Play Protect to regain access, but it is recommended to keep it enabled for security. The SmartTube app offers features like SponsorBlock support, live chat, picture-in-picture mode, and customizable video quality settings.

AppWizard

November 26, 2025

New Plex update means you need a pass for remote viewing on your TV

Plex is requiring Roku users to have either a Remote Watch Pass or a Plex Pass for remote streaming starting this week, with plans to extend similar requirements to Android TV, Fire TV, and Apple TV by 2026. Users need a Plex Pass or Remote Watch Pass to access a Plex server outside its home network, although server owners can bypass this fee by subscribing to a Plex Pass. The Plex Pass is available for a monthly, yearly, or one-time lifetime fee, while the Remote Watch Pass is offered on a monthly or annual basis.

AppWizard

November 21, 2025

6 Free Android TV Apps You Need To Install Before Google Removes Sideloading

Developers are now required to register their applications before users can sideload them on Android devices, a change aimed at reducing malware risks associated with unverified apps. This policy is particularly significant for Android TV users who often rely on sideloading for niche utilities and unofficial streaming tools. The risk of malware is reportedly 50 times higher when apps are installed from outside the Play Store. Google has promised to create a workflow for experienced users to sideload unverified apps despite the new restrictions. Sideloading allows users to install apps not available on the Play Store, but it comes with increased risks of data-stealing malware. Users can sideload apps by transferring APK files to their devices and adjusting settings to allow installations from unknown sources. SmartTube TV is an unofficial YouTube client that offers an ad-free experience and integrates features like SponsorBlock, but it violates YouTube's Terms of Service. Aptoide TV is a community-driven app marketplace that provides access to apps not available on the Play Store, though caution is advised due to potential malware risks. Leanback Launcher is an open-source launcher that enhances performance and customization options for Android TV. RetroArch allows users to emulate classic gaming consoles and requires legal copies of games. Syncler organizes and streams shows and movies from user-selected providers without hosting content itself. AdAway is an open-source ad blocker that filters ads at the device level using host files. The selection of these apps focuses on enhancing the Android TV experience through performance improvements, user-friendly interfaces, and a range of categories including streaming, gaming, customization, and privacy.

BetaBeacon

November 17, 2025

Android 17 update to bring native game controller remapping for mobile gamers

Android is working on a new feature for Android 17 that will allow users to remap controllers at the system level, providing a native controller area in Settings. This feature will also include a "virtual gamepad" that can map physical buttons to touch regions in games that do not have native controller support. This new feature aims to provide consistency for clip-on controllers, Android handhelds, cloud gaming players, Android TV boxes, laptops, and improve accessibility for players who rely on remapping buttons for gameplay.