On: SSH keys stolen by stream of malicious PyPI and NPM packages

[pritambaral]

Docker actually worsens this. The default installation of docker makes no effort to prevent host root access from a container. Root in container is root in host