Hiding in Plain Sight: Hidden Vulnerabilities in Popular Open Source Containers