Third-party Instagram app pulled after stealing passwords

The app, called InstaAlert, was snagging usernames and passwords and sending them to a remote server, according to the developer who spotted it.