BREAKING: Nekogram is secretly sending your phone numbers to the developer.
The backdoor is hidden in the Extra.java file, which differs from the template uploaded to the repository. The obfuscated code sends data as an inline request to @nekonotificationbot, leaving no trace.
More info...