Our Android developer silently inserted cryptocurrency mining code into the new release, pushed the clean version to github, but submitted the infected version

Our Android developer silently inserted cryptocurrency mining code into the new release, pushed the clean version to github, but submitted the infected version to Google Play. After a few weeks Google caught that and banned our app. We lost thousands of customers and years of work and had to start over with a brand new app. Years later the infected app is still mining cryptocurrency because users ignore Google’s malware warning message and keep using the app. PS: I should have said “our FORMER Android developer.”