What's most telling isn't that it was caught carrying malware — it's how it responded after being caught:
- After SafeW was found to be bundling malware, it was removed from Google Play;
- The developer issued no public fix and no explanation — instead, they renamed the software SafeX and re-listed it on Google Play;
- In April 2026, Kaspersky named it again: SafeX was still bundling malware;
- On that basis, Google Play removed it once more;
- Once it was delisted from the store, SafeW stopped going through Google Play and switched to distributing an installable Android APK directly from its own website, bypassing app-store security review — the same party that has now been caught carrying malware twice, handing an unvetted installer straight onto your phone.
Same developer, same data-stealing behavior — only the name changed. This pattern of "get caught, rename, and put it right back on the store" is itself damning: it shows the problem isn't one version's oversight, but that this product is fundamentally untrustworthy.