Barnes & Noble last month introduced the new Nook 7 Android tablet, complete with access to millions of books, magazines, and graphic novels, as well as some unwanted spyware.
As reported by Linux Journal, the $50 device includes Adups firmware, which monitors how the device is being used—without the user's permission.
The same malware was recently found in some Android-based Blu smartphones.
Researchers last month discovered the program was sending Blu owners' texts to a server in China. The manufacturer moved to prevent the software from sending more details home, and swapped the Adups update utility for Google's on new models, on sale now from Amazon.
According to The Digital Reader, Adups scrubbed its software and pushed out a fresh version, which it says no longer spies on users. That's no consolation, however, for new Nook buyers: Linux Journal said B&N's tablet features an older version which still transmits data to China.
The bookseller, however, disputes those claims. In a statement provided to PCMag, B&N Chief Digital Officer Fred Argir said the tablet, when connected to Wi-Fi, automatically updates to a newer version of Adups (5.5), "which has been certified as complying with Google's security requirements."
"Adups has confirmed to Barnes & Noble that it never collected any personally identifiable or location data from Nook 7 devices nor will it do so in the future," Argir added.
"Finally, we are working on a software updated to remove Adups completely from the Nook Tablet 7," he continued. "That update will be made available to download within the next few weeks, but in the meantime customers can rest assured that the device is safe to use."
Still, wary users can take advantage of Barnes & Noble's holiday return policy, which gives folks until Jan. 31 to return most merchandise, including Nook tablets, purchased between Nov. 14 and Dec. 31. So there's plenty of time to dig out that receipt and get a full refund if you so desire.
Adups did not immediately respond to PCMag's request for comment.