Threat actors are leveraging a technique called versioning to evade Google Play Store's malware detections and target Android users.
"Campaigns using versioning commonly target users' credentials, data, and finances," Google Cybersecurity Action Team (GCAT) said in its August 2023 Threat Horizons Report
https://thehackernews.com/2023/08/malicious-apps-use-sneaky-versioning.html
versioning is not a new phenomenon, it's sneaky and hard to detect.
Earlier this May, ESET discovered a screen recording app named "iRecorder - Screen Recorder" that remained innocuous for nearly a year after it was first uploaded to the Play Store before malicious changes were introduced to covertly spy on its users.
https://thehackernews.com/2023/05/data-stealing-malware-discovered-in.html