I found it kind of interesting that the app's maintainer claimed (linked at the top of this article) his investigation found that his website was exploited and that the maliciously modified page had a list of Bing and Google IP addresses. It would then would only server the malicious version to IP's not from them.