This is essentially a dupe of https://news.ycombinator.com/item?id=17303570 https://news.ycombinator.com/item?id=17303570 FWIW that headline isn't great. Dock

This is essentially a dupe of https://news.ycombinator.com/item?id=17303570 https://news.ycombinator.com/item?id=17303570 FWIW that headline isn't great. Docker hub pulls in no way correlate to innocent users pulling/using those images. It could be (and this is quite likely) just other malware which made use of those images and just used Docker hub as a repository. There are official images for the software in question and I don't think it's that likely that that many people ignored the official ones and got these ones.