I still think this didn't get enough attention.

Thousands of smartphone applications in Apple (AAPL.O) & Google's (GOOGL.O) online stores contain computer code developed by a technology company, Pushwoosh, that presents itself as based in the United States, but is actually Russian.

The US Army said it had removed an app containing Pushwoosh code in March because of the same concerns. That app was used by soldiers at one of the country's main combat training bases.

https://www.reuters.com/technology/exclusive-russian-software-disguised-american-finds-its-way-into-us-army-cdc-2022-11-14/?utm_source=substack&utm_medium=email

EXCLUSIVE Russian software disguised as American finds its way into U.S. Army, CDC apps

Thousands of smartphone applications in Apple <a href="https://www.reuters.com/companies/AAPL.O/"target="_blank">(AAPL.O)</a> and Google's <a href="https://www.reuters.com/companies/GOOGL.O/"target="_blank">(GOOGL.O)</a> online stores contain computer code developed by a technology company, Pushwoosh, that presents itself as based in the United States, but is actually Russian, Reuters has found.

Reuters
@Gal_suburban I agree wholeheartedly. Especially since the otherwise excellent Reuters piece missed a key component: One of the core developers of Pushwoosh is the author of the Pincer trojan for Android. https://krebsonsecurity.com/2013/08/who-wrote-the-pincer-android-trojan/
Who Wrote the Pincer Android Trojan? – Krebs on Security

@Gal_suburban thanks for posting this. Do you know if the list of the 8,000 apps that use the software is available somewhere? This article leaves me wondering if this shit is on my phone.
@Gal_suburban so how do we find out which apps?
@Gal_suburban Good news article but of little practical utility, since the list of affected software is not provided.