In a case I'm aware ofa specific case I'm aware of, this has probably been caused by Facebook SDK 5.0.3 which contains
<receiver
android:name="com.facebook.CampaignTrackingReceiver"
android:exported="true"
android:permission="android.permission.INSTALL_PACKAGES" >
<intent-filter>
<action android:name="com.android.vending.INSTALL_REFERRER" />
</intent-filter>
</receiver>
android.permission.INSTALL_PACKAGES is forbidden on Google Play. Not 100% sure it's that (we're yet to upload to Play) and not sure why it reports Hockey SDK, which has never been introduced to the app (dependency reports and even app decompilation don't show any Hockey packages at all).