Malicious repositories

153 malicious repositories reported in published sources on North Korean (DPRK) cyber operations, ordered by value. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
0glabs-solid/0g-play Contagious Interview 1
0GPlayworks/MetaPlay Contagious Interview 1
0GXPlay/MetaPlay Contagious Interview 1
0xbrentfi/StockX_PoC_1.03 Contagious Interview 1
a5-dir/CoinRoll Contagious Interview 1
a5labs-git/Coin-Roll Contagious Interview 1
a5labs-hubs/CoinRoll Contagious Interview 1
a5labsgit/AmonixPlay Contagious Interview 1
adexplore/Kusto.Explorer EtherHiding / UNC5342DPRK (cluster unattributed) 2
adkcore/Windows-ADK EtherHiding / UNC5342DPRK (cluster unattributed) 2
AetSoftNesus/AetSoftSolution Contagious Interview 1
Altrix-Demo-Repo/Altrix Contagious Interview 1
Altura-Hub111/Altura-MVP Contagious Interview 1
aokisasakidev/mit-license-pkg Contagious Interview 1
applck/AppLocker EtherHiding / UNC5342DPRK (cluster unattributed) 2
aronhirotobz-ops/GB-VPS Contagious Interview 1
arsagajp/JP-Soccer Contagious Interview 1
arsagapartner/JP-Soccer Contagious Interview 1
ArsaPro001/jp-soc07 Contagious Interview 1
astrabytesyncshub2019/.github Contagious Interview 1
astrabytesyncshub2019/sub-web3-social-platform Contagious Interview 1
astrasbytesyncs/rocko Contagious Interview 1
astrasbytesyncs/web3-social-platform Contagious Interview 1
autify5/Autologon EtherHiding / UNC5342DPRK (cluster unattributed) 2
autonomys-nexus/Autonomys Contagious Interview 1
azpath/AzCopy EtherHiding / UNC5342DPRK (cluster unattributed) 2
bartuser/BarTender EtherHiding / UNC5342DPRK (cluster unattributed) 2
BChain-Cap/SocialFi-v1 Contagious Interview 1
bestselection18/Automation-bot IT Worker Fraud Ketman 1
Betfin-mvp/poker Contagious Interview 1
Betfin-mvp/poker-v2 Contagious Interview 1
Betfin-mvp/poker-v3 Contagious Interview 1
beycmp/Beyond-Compare EtherHiding / UNC5342DPRK (cluster unattributed) 2
bitbucket.org/coinbase2024/voting-dapp Contagious Interview 1
bitbucket.org/notion-dex/ultrax Contagious Interview 1
bitbucket.org/welcome-air/welcome-nest Contagious Interview 1
bitbucket.org/zoro-workspace Contagious Interview 1
Blockdaemon-Hub0022/World-Travel Contagious Interview 1
bloxberg-D/Jackpot Contagious Interview 1
borismelnik1982-netizen/governance-staking-build Contagious Interview 1
bvclient/Bitvise-SSH-Client EtherHiding / UNC5342DPRK (cluster unattributed) 2
corelaun/Autoruns EtherHiding / UNC5342DPRK (cluster unattributed) 2
cpumon/Process-Monitor EtherHiding / UNC5342DPRK (cluster unattributed) 2
damekit/Dameware EtherHiding / UNC5342DPRK (cluster unattributed) 2
DapperlabsMD/Dapperlabs-MVP Contagious Interview 1
dbgrix/DebugView EtherHiding / UNC5342DPRK (cluster unattributed) 2
delprof2int/Delprof2 EtherHiding / UNC5342DPRK (cluster unattributed) 2
desklt/LEAP-Desktop EtherHiding / UNC5342DPRK (cluster unattributed) 2
enssm/NSSM EtherHiding / UNC5342DPRK (cluster unattributed) 2
EverDreamSoftSolution/EverPlayMVP Contagious Interview 1
fsgrid/FSLogix EtherHiding / UNC5342DPRK (cluster unattributed) 2
gitlab.com/predict-together/forge-4626-invariants DPRK (cluster unattributed) 1
gitlab.com/pulsynk-org/rekt-db DPRK (cluster unattributed) 1
gitlab.com/trixauvex-org/x402-kit DPRK (cluster unattributed) 1
glyph3/ScreenConnect-Client EtherHiding / UNC5342DPRK (cluster unattributed) 2
golangorg/formstash Contagious Interview 1
Holitix-studio/Holitix-mvp Contagious Interview 1
Holitix-tech/Holitix-mvp Contagious Interview 1
iiscfg/IIS-Crypto EtherHiding / UNC5342DPRK (cluster unattributed) 2
Improbable-Hub/World-Dream Contagious Interview 1
kdiffmg/KDiff3 EtherHiding / UNC5342DPRK (cluster unattributed) 2
lapwiz/Windows-LAPS EtherHiding / UNC5342DPRK (cluster unattributed) 2
Lukso-Tech-Hub5/Lukso-Platform Contagious Interview 1
michalcaladanxyz/caladanecomvp Contagious Interview 1
migrtool/PCmover EtherHiding / UNC5342DPRK (cluster unattributed) 2
mireles343/forge-4626-invariants DPRK (cluster unattributed) 1
ngjuj88-design/aimarket Contagious Interview 1
ngjuj88-design/mplay Contagious Interview 1
ngjuj88-design/ritualgame Contagious Interview 1
omskiwdcvoiuyfd0998/0ijnbjfke8djfefhkehhdkefkeu90djfkefh Konni 1
omskiwdcvoiuyfd0998/media Konni 1
omskiwdcvoiuyfd0998/medianews Konni 1
omskiwdcvoiuyfd0998/zoominstaller Konni 1
orgastrabytesync/sub-web3-social-platform Contagious Interview 1
oxyaorigin-hub2000/EverPlay_MVP_1.8 Contagious Interview 1
paperdesk/PaperPort EtherHiding / UNC5342DPRK (cluster unattributed) 2
PedrinPY/rekt-db DPRK (cluster unattributed) 1
procbyte/ProcDump EtherHiding / UNC5342DPRK (cluster unattributed) 2
prtgmon/PRTG-Network-Monitor EtherHiding / UNC5342DPRK (cluster unattributed) 2
psanvil/PsTools EtherHiding / UNC5342DPRK (cluster unattributed) 2
psexsrv/PsExec EtherHiding / UNC5342DPRK (cluster unattributed) 2
Pulsynk/pulsynk DPRK (cluster unattributed) 1
pwmover/Profwiz EtherHiding / UNC5342DPRK (cluster unattributed) 2
pxmon/Process-Explorer EtherHiding / UNC5342DPRK (cluster unattributed) 2
Qevoratrix-live-coding/react Contagious Interview 1
reqdbg/HTTP-Debugger EtherHiding / UNC5342DPRK (cluster unattributed) 2
ritualai-hub/AI-Mesh Contagious Interview 1
ritualaihub/AI-Mesh Contagious Interview 1
ritualgroup/ZetaPlay Contagious Interview 1
ritualzhub/ZetaPlay Contagious Interview 1
rkama411/x402-kit DPRK (cluster unattributed) 1
RominaMabelRamirez/dify Contagious Interview 1
RominaMabelRamirez/hflix Contagious Interview 1
rsamod/RSAT EtherHiding / UNC5342DPRK (cluster unattributed) 2
safcli/Safenet-Authentication-Client EtherHiding / UNC5342DPRK (cluster unattributed) 2
skyjum/x402-kit DPRK (cluster unattributed) 1
SonataM/arky IT Worker Fraud 1
SonataM/brics IT Worker Fraud 1
SonataM/cr900 IT Worker Fraud 1
SonataM/decoy IT Worker Fraud 1
SonataM/Liquina IT Worker Fraud 1
SonataM/louie IT Worker Fraud 1
SonataM/Moocat IT Worker Fraud 1
SonataM/orken IT Worker Fraud 1
SonataM/peku IT Worker Fraud 1
SonataM/trumpshair IT Worker Fraud 1
SonataM/trumpx IT Worker Fraud 1
SonataM/ufobirddog IT Worker Fraud 1
SonataM/vodcat IT Worker Fraud 1
spherityworkspace18/Metaforge-Platform Contagious Interview 1
sputmgr/SuperPuTTY EtherHiding / UNC5342DPRK (cluster unattributed) 2
sr-werney/forge-4626-invariants DPRK (cluster unattributed) 1
sshcrt/SecureCRT EtherHiding / UNC5342DPRK (cluster unattributed) 2
stardev0914/agent.snoopybnb.wtf Contagious Interview 1
stardev0914/aptober Contagious Interview 1
stardev0914/bestwallet Contagious Interview 1
stardev0914/captainpepe Contagious Interview 1
stardev0914/claim.snoopybnb.wtf Contagious Interview 1
stardev0914/dexproject Contagious Interview 1
stardev0914/etherchainai Contagious Interview 1
stardev0914/futuresyncx Contagious Interview 1
stardev0914/laifubnb Contagious Interview 1
stardev0914/pepeheimer Contagious Interview 1
stardev0914/protocolai Contagious Interview 1
stardev0914/safutoken Contagious Interview 1
stardev0914/snoopybnb.wtf Contagious Interview 1
stardev0914/snortertoken Contagious Interview 1
stardev0914/spurdomeme Contagious Interview 1
stardev0914/stakesnoopy.wtf Contagious Interview 1
stardev0914/tailwind-magic Contagious Interview 1
stardev0914/tetrismic Contagious Interview 1
stockx-fi/stockx_v1 Contagious Interview 1
Stomp47/rekt-db DPRK (cluster unattributed) 1
symdbg/WinDbg EtherHiding / UNC5342DPRK (cluster unattributed) 2
syshield/Sysmon EtherHiding / UNC5342DPRK (cluster unattributed) 2
sysramap/RAMMap EtherHiding / UNC5342DPRK (cluster unattributed) 2
TarsAI-com/AgentMesh Contagious Interview 1
TarsAI-net/AgentMesh Contagious Interview 1
tarsai-pro/Agent-Mesh Contagious Interview 1
tcpvmon/TCPView EtherHiding / UNC5342DPRK (cluster unattributed) 2
teracli/Tera-Term EtherHiding / UNC5342DPRK (cluster unattributed) 2
togetherlabsinchub/palooza Contagious Interview 1
Trickgs-Hub/Trickgs-MVP Contagious Interview 1
Trixauvex-org/trixauvex DPRK (cluster unattributed) 1
velachainhub/nft-ecommerce Contagious Interview 1
vhdcore/Disk2vhd EtherHiding / UNC5342DPRK (cluster unattributed) 2
vmlets/VMware-Tools EtherHiding / UNC5342DPRK (cluster unattributed) 2
wayout4u/rekt-db DPRK (cluster unattributed) 1
winlabel/BgInfo EtherHiding / UNC5342DPRK (cluster unattributed) 2
xaya244/XayaPlay_MVP_1.2 Contagious Interview 1
xferwiz/Transwiz EtherHiding / UNC5342DPRK (cluster unattributed) 2
zerog-ai/MGVerse Contagious Interview 1
ziobiri/forge-4626-invariants DPRK (cluster unattributed) 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.