I notice a lot of spam in the Android market comments which I believe is from a trojan. I wish more users would report this spam so it can be quickly identified to its source and stopped.
Applications like a simple "flashlight" that requires the network, location, sdcard, and the ability to make telephone calls are becoming more common.