Updating fails becuase of the different signing keys, but users are promted to uninstall the currently installed version in order to receive the new version.
We did not analyse the copy yet, but we cannot ensure that this and any updated versions contain no malicous code.
DO NOT INSTALL NEWPIPE FROM ANY THIRD PARTY STORES
To receive updates, please use @fdroidorg and add our custom repository https://newpipe.net/FAQ/tutorials/install-add-fdroid-repo/
@tobigr .m this sounds like some next-level sketchy shit; how did this happen?