Installing an app outside the normal trusted distribution channel does not automatically prove that it is malicious, but it increases the need for caution.
Review what the app can access and whether those permissions make sense for its purpose.
If the app is unnecessary or suspicious, remove it and update the device and its security software.
If you entered passwords, banking information, or verification codes into the app, secure the affected accounts.