GooglePlay reports latest F-Droid version of Aves Libre as potential malware

Google flags open‑source photo app as “dangerous” — fans cry sabotage, others say old news

TLDR: Google’s built‑in scanner warned that an open‑source photo app from F‑Droid ‘could be dangerous,’ though users could still install and some say the issue was already fixed. Comments split between ‘Google is targeting F‑Droid’ and ‘this is stale drama,’ with fears of algorithmic bans looming.

A small pop‑up became a big internet brawl: Google’s Play Protect flashed a “this could be dangerous” warning when someone tried updating Aves Libre (an open‑source photo gallery) via Droid‑ify from F‑Droid. The install still worked, but the comments did not chill. One side, led by bhhaskin, insists this was already fixed — “resolved two weeks ago” — and wonders why we’re relitigating it. The other side says it’s not just a glitch, it’s a vibe: a slow squeeze on alternative app stores, with Google’s scanner doing the dirty work.

That’s where the drama hit turbo. benatkin threw down the line of the day — “put the metaphorical kibosh on F‑Droid” — and capped it with “Google is not to be trusted.” Another commenter went full Black Mirror, warning that with new rules coming, one algorithmic false positive could lock developers out for good. The memes wrote themselves: “Play Protect protecting me from freedom,” “Malware detected: cat photos,” and “F‑Droid is Voldemort — He Who Must Not Be Installed.” Skeptics fired back with “take off the tinfoil, it’s already fixed.” But even the calm crowd agrees on the chill: a single red warning from Play Protect can scare off regular users and kneecap open‑source apps overnight. Glitch or glimpse of the future? Choose your fighter.

Key Points

  • Google Play’s security scanner flagged the F-Droid build of Aves Libre v1.13.9 as potentially dangerous during an update via Droid-ify.
  • The user could bypass the warning and complete the installation after granting approval.
  • Reproduction steps include enabling the Google Play security scanner and attempting to install Aves Libre 1.13.9.
  • The environment included Android 16 (API 36) on a Google Pixel 7a, with Aves Libre 1.13.9-libre (build 16002) built using Flutter 3.27.4.
  • The report lists system details (locale, storage permissions, features) but provides no root cause analysis or logs explaining the warning.

Hottest takes

“Very odd to post about this now” — bhhaskin
“They fully intend to put the metaphorical kibosh on F-Droid” — benatkin
“all it takes is a false positive from an algorithm and you would lose the right to develop applications forever” — e145bc455f1
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.