Vulnerabilities are one thing. Many container images in development/testing are never actually exposed to anything hostile…

Active backdoors are quite another…