Leaked secrets in public Docker Hub images (2025)

What happened

• Flare found 10k+ images leaking credentials. Binarly found XZ-backdoored images still on Docker Hub (Aug 2025).

Sources

• https://flare.io/learn/resources/blog/docker-hub-secrets-exposed

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.