so...
big news happens a few days ago about attackers using the 'artex framework' to hack stuff...
but its on github: https://github.com/trhhubsd/ARTEX
and its backdoored. the prebuilt tomicdd/artex docker image is whats backdoored, not the code on github.
1) friends dont let friends docker
2) seems like ms is doing the advertising for a backdoored chinese nation state malware package
docker is the solution for "but it works on my computer" because the answer is "okay fine we'll ship your computer"
turns out the computer that got shipped was owned by someone who got popped, and everyone who installs it gets popped too.
pretty convenient huh