`toskypi1016@gmail.com`

toskypi1016@gmail.com is an email address that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kieran Miyamoto (kmsec) and SafeDep. The earliest of those reports is dated 2026-03-17 and the most recent 2026-05-28.

email address Contagious Interview MATCHED IN SOURCE

Listed as tosky.pi1016@gmail.com

First seen 2026-03-17 · last seen 2026-05-28

Sources

…big-numerator-5.0.3.tgz ID for es-lint-builders 2026-03-16 01:21:54 changelog-logger-utilities (v1.0.0) toskypi (tosky.pi1016@gmail.com) changelog-logger-utilities-1.0.0.tgz exfil: changelog.rest 2026-03-15 23:01:08 pretty-ts-logger (v1.0.5) traderdev…
Contagious Trader campaign - Coordinated weaponisation of cryptocurrency trading bots by suspected DPRK malware operators | kmsec.uk — Kieran Miyamoto (kmsec) · under “npm packages” · published 2026-03-17 · pulled 2026-09-09
…declared toskypi as the package author, a name that appears independently in kmsec.uk’s Contagious Trader campaign report under the email tosky.pi1016@gmail.com[email protected] . The jpeek namespace rotates numerically: jpeek868 , jpeek886 , jpeek895 are all linked npm accounts sharing the same…
Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace - Real-time Open Source Software Supply Chain Security — SafeDep · under “Identity Cluster” · published 2026-05-28 · pulled 2026-09-12
…the package author, a name that appears independently in kmsec.uk’s Contagious Trader campaign report ⁠ (opens in new tab) under the email tosky.pi1016@gmail.com . The jpeek namespace rotates numerically: jpeek868 , jpeek886 , jpeek895 are all linked npm accounts sharing the same…
Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace - Real-time Open Source Software Supply Chain Security — SafeDep · under “Identity Cluster” · published 2026-05-28 · pulled 2026-11-13

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Contagious Trader campaign - Coordinated weaponisation of cryptocurrency trading bots by suspected DPRK malware operators | kmsec.uk

Kieran Miyamoto (kmsec) lists 34 other indicators in this source. 7 are shown, chosen across types.

All 35 indicators from this source

Cited by the same report: Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace - Real-time Open Source Software Supply Chain Security

SafeDep lists 6 other indicators in this source. 5 are shown, chosen across types.

All 7 indicators from this source