Taint the suspicious node to prevent Pods that have interacted with it from being scheduled on other nodes in the cluster

Scale down the deployment associated with the compromised container to zero other nodes

Restart the node to disrupt the malicious activity, and force all Pods to be restructured on other nodes.

Cordon the node to prevent new Pods from being scheduled, the drain the node to safely remove existing Pods and reschedule them to other nodes.