Google said in 2018 it tracked a rise in the number of potentially harmful apps found on Android devices that were either pre-installed or delivered via over-the-air updates.
Google Warns of Growing Android Attack Vector: Backdoored SDKs and Pre-Installed Apps | Threatpost