# Container image compromise

Container image compromise
High · Investigating
Affected: example/app:1.6

A published container tag was replaced with an image that opens a reverse shell.

What to do:
- Pin deployments to the last known-good digest.
- Block the replaced tag in the registry policy.

Sources:
- Registry notice https://example.com/image-compromise

Canonical page: https://www.incidentping.com/incidents/container-image-compromise