The high-severity defect affects a widely used — but largely hidden — archive tool that spans many forks.

Application Attack Matrix is a community effort designed to help defenders and organizations better understand and define how attackers use and exploit weaknesses in applications.

The company specializes in platforms that help developers monitor and protect their containers and microservices.

Twistlock says it's the security platform for enterprises that are increasingly using cloud native systems.

The malicious images were stored on Docker Hub for about a year before they were taken down.