1 article
An official teardown reveals the app pulls executable code from an unverified GitHub account and tracks GPS without clear consent.