This was exactly why I asked about creating Docker images entirely from scratch unlike the countless how-to's that suggest downloading the premade images. https://arstechnica.com/information-technology/2018/06/backdoored-images-downloaded-5-million-times-finally-removed-from-docker-hub/