Dockerfile embeds netcat via apt-get and multi-arch buildx push to ACR mongo repo

Emiliano Mema@Nosalva

•updated Jul 16, 2026•0•0•0

Detects build process content (likely within a Dockerfile or CI/CD script) that installs 'netcat' and initiates a multi-architecture build and push operation to a specific container registry path (registryfr.azurecr.io/mongo:latest), which may indicate the creation of a backdoored or malicious container image.