Considering similar reports, maybe their default templates are already cracked with injected code.

So everytime they create a new container, it's got a backdoor.