AutoSpill attack steals credentials from Android password managers

"In an attack scenario, a rogue app serving a login form could capture the user’s credentials without leaving any indication of the compromise."

https://www.bleepingcomputer.com/news/security/autospill-attack-steals-credentials-from-android-password-managers/