malicious versions are recalled and removed when caught - so you don't need to update to the next version