Researchers at Endor Labs uncovered 88 new packages tied to new waves of the campaign, which uses remote dynamic dependencies to deliver credential-stealing malware.
You can plug in your phone, download an emulator, or install the Google Play Store to access Android apps on your computer. Some tinkering may be required.