GO Keyboard, an insanely popular custom keyboard app for the Android OS, also available on the official Google Play Store, was caught collecting user data and downloading and running code from a third-party server. […]

from https://www.bleepingcomputer.com/news/security/popular-android-keyboard-app-caught-collecting-user-data-running-external-code/