Open-source spyware makes it on the Google Play Store