For the former there is: https://github.com/privacyguides/verified-apps-android

Key compromise sucks and is hard to protect against. That said the Apple/Google app stores are also full of scams where people lose a lot of real money:

https://www.macrumors.com/2026/07/27/apple-app-store-fake-bi...