InVxTermux (com.involvex.termux_app) is an unofficial fork of
termux/termux-app.
Please report privately via GitHub Security Advisories for
involvex/termux-app
when possible. Do not open a public issue for unfixed vulnerabilities.
If the issue also affects official Termux (or is clearly an upstream defect), prefer the Termux project’s process:
Core Linux packages inside the environment are maintained in
termux/termux-packages — report
package security issues there when appropriate.
GitHub release APKs for this fork are typically signed with a public test
key. Treat them like debug builds: only install from a source you trust, and
do not mix APKs from different publishers that share sharedUserId.