Hacker News Reader

Have you cross checked the signatures?

Nope, and it was totally my fault, though at the time I tried to find a way to report the app and I didnt see it (though I could've missed it)

> totally my fault

Not totally: the big question remains of how a tampered-with package can reach a prominent repository.