I also had trouble following this article. The Tesla vulnerability at the top seems to be simply a misconfigured kubernetes cluster, through which the attacker

I also had trouble following this article. The Tesla vulnerability at the top seems to be simply a misconfigured kubernetes cluster, through which the attackers were able to get at AWS credentials. But then all of the subsequent examples are malicious images hosted on dockerhub. Were malicious images involved in the Tesla exploit in some way? What's the connection?