Supply Chain Attacks Using Container Images

Team Nautilus (Aqua Security) identified five malicious Docker Hub images—some using typo‑squatting and misleading names—that execute a dao.py script or directly run the xmrig Monero miner (with provided MD5 hashes and pull counts), hijacking host resources for cryptocurrency mining; the report includes analysis, IOC details, and mitigation recommendations for supply‑chain and container registry security.