Solana Mobile (maker of the Seeker phone) said on Nov 1 that a malicious third-party app named "SKR Claim" was submitted to the Solana dApp Store, and that the App Spotlight and Quests UI were changed to feature it after unauthorized access to the dApp Publishing Portal. The app asked users to enter their seed phrases.

It was in the Spotlight for one hour before being pulled from the store and is being removed from devices that installed it. The team says it found and patched a bug that allowed linking to apps that were not fully published. It has not said how the portal was accessed or how many people entered a seed phrase.

What to do: anyone who typed a seed phrase into SKR Claim should treat that wallet as compromised and move funds to a new wallet with a new seed. Solana Mobile says it will never ask for a seed phrase or ask you to connect a wallet to claim an airdrop.