Catch Me If You Can: Uncovering Malicious Threats in Container Images