Docker Hub flaw let attackers impersonate users, tamper with images

A critical vulnerability in Docker Hub allowed attackers to hijack a target's identity by converting their own account into an organization, appointing the victim as owner, and then leveraging the victim's Personal Access Token (PAT) to publish malicious container images under a trusted name. This attack required no exploitation of the victim's credentials directly — only the structural flaw in how Docker Hub handled account-to-organization conversions and token scope. The supply chain implications are severe: developers and organizations consuming those images would have had no obvious indication that the images were tampered with. This incident underscores the danger of implicit trust placed in registry identities and the need to continuously validate the integrity of third-party software artifacts.