Indeed. OP's investigation proves nothing other their device / system was compromised and provides 0 evidence the container itself is the issue.