Third-party APK repositories are notorious for bundling malware with legitimate-looking apps. Security researchers have noted that many generic "spy apps" actually contain: