SparkCat mobile malware uses on-device OCR to scan your photos for keys and passwords

https://developers.google.com/ml-kit

Be careful when you allow apps to access your photos or files. Avoid allowing full access. They can scan everything and look for valuable information like keys and passwords. You can’t just trust an app to do “the right thing” with your data.