Compromised upstream images - Dependency confusion in package managers - Typosquatting in container registries