You are being facetious. If your image is called monero-miner and a bunch of people download it, of course it's not going to be considered malicious code. If

You are being facetious. If your image is called monero-miner and a bunch of people download it, of course it's not going to be considered malicious code. If your image is called apache-webserver and a bunch of people download it and you've stealth bundled a monero miner, of course it's going to be considered malicious code. EDIT: even worse than that, the images are actually back doored they open up a reverse shell to allow the remote to execute arbitrary commands.