https://github.com/alphavenus0924

https://github.com/alphavenus0924 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-08-01.

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-30

First seen 2025-08-01 · last seen 2025-08-01

Source

  • The post publishes the following list of the kstar0102 persona, which this repository already documents, and reads the list itself as the finding: in the researcher's words it is thick with North Korean flags. These five accounts are carried as a group rather than as personas because that is the level the claim is made at -- the researcher asserts the company the account keeps, not an identity for each member of it. Two names on the same screenshot are deliberately absent. Oleksii Taranenko has an entry of his own here from other posts, and the remaining account belongs to a publicly known developer in Tokyo with an ordinary professional presence, who appears in the list for the same reason these personas follow any real engineer, and who is recorded in the held-back list so a later pass over this screenshot does not sweep him in.
    x.com/browsercookies/status/1951110041047855169 — Cookie Connoisseur (@browsercookies) · under “GitHub accounts the kstar0102 persona follows” · published 2025-08-01 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created2024-07-28
Repositories46 original, 1 forked
History older than the account6 repositories: alphaVenus0924/Dockerize0924 (first commit 2023-12-14), obuchi-tana/trading-bot-solana (first commit 2024-01-03), alphaVenus0924/Three.js-Animation-simple (first commit 2018-10-19), alphaVenus0924/solidity (first commit 2022-09-14), alphaVenus0924/alphaVenus0924 (first commit 2022-05-14)
Commits copied into others' repositories0
Commit identities1 address, 3 names; up to 3 names on one address
Name then four digitsalphavenus0924

Commit addresses this index holds

Follows these indexed accounts

Followed by these indexed accounts

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-10-18. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.

Related indicators

Cited by the same report: x.com/browsercookies/status/1951110041047855169

Cookie Connoisseur (@browsercookies) lists 6 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.