🚨 Over a year after the XZ Utils backdoor was exposed, 35 infected Docker images are still live on Docker Hub — some built on top of each other, quietly spreading the malware.

They can let attackers bypass SSH auth & run root commands.

CheckDot is SAFU research CheckDot .