Our Android developer silently inserted cryptocurrency mining code into the new release, pushed the clean version to github, but submitted the infected version to Google Play.
After a few weeks Google caught that and banned our app. We lost thousands of customers and years of work and had to start over with a brand new app. Years later the infected app is still mining cryptocurrency because users ignore Google’s malware warning message and keep using the app.
PS: I should have said “our FORMER Android developer.”