Observed incident
A copycat ARTEX container hides a root shell in its login handler
Reported
Published here
What happened
BadByte found that a copycat deployment file pulled a modified penetration-testing console. Its binary lets a specially formed login request run a command as root inside the container before authentication. Reachable secrets include model keys and engagement credentials.
Parties and reporting
AI tools and systems: ARTEX, tomicdd/artex and byte-identical congdonglinux/artex images, Docker Compose
Outcome
BadByte identified 62 consoles serving the affected build on November 2–4. At the November 4 checkpoint, 46 still served it. The November 5 update found 637 repositories still referencing it. Malicious use of the shell on these systems was not established.
Operating lesson
Isolate affected containers, preserve logs, rebuild from verified artifacts and rotate the model keys, proxy keys and engagement credentials available inside them.
Evidence and limits
The image was published October 8. An October 23 issue voiced suspicion. BadByte dates the first specific public identification of the image backdoor to November 2. Installed consoles and download counts measure exposure, not confirmed hostile sessions.