Re:Analysis on Docker Hub malicious images: Attacks through ...
by egberts1 on Thursday November 24, 2022 @11:46AM
(#33733352)
A couple hundred downloads?
These kinds of repository are probably best used by drive-by malware.
I think this (and all) repository's download log should be made open, or at least made viewable prior to your downloading step as part of the trust profiling.
These kinds of repository are probably best used by drive-by malware.
I think this (and all) repository's download log should be made open, or at least made viewable prior to your downloading step as part of the trust profiling.