Malicious Images on Docker Hub Accumulated Millions of Pulls in Coordinated Supply Chain Attack
Threat actors uploaded thousands of malicious container images to Docker Hub mimicking official Node.js, Python, and Nginx images. The campaign accumulated over two million pulls before detection, harvesting credentials from containerized production environments.