Chollima Hunter

← Remote Workers

https://github.com/gitworkhub9

https://github.com/gitworkhub9 is a GitHub account that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Hunter and bryanchriswhite (dev-trap-dossiers). The earliest of those reports is dated 2026-05-18 and the most recent 2026-09-28.

github profile Contagious Interview CURATED removed checked 2026-09-30

Listed as gitworkhub9

First seen 2026-05-18 · last seen 2026-09-28

Sources

  • Found on 28 September 2026 by reading every commit author in the 39 impersonation-company lure repositories filed the same day. Leaving out three long-established developers whose projects the lures copy (their commits are the copied history), every other author account now returns 404: GitHub has removed them, in a batch whose names follow farm patterns (CodeBlock and a number, aitechbuild and a number, 0xroaman-N, GitWorkHub8 and 9, williamwagle1 to 14, gitworkspace17, everdreamsoft variants) and whose addresses are plus-addressed Gmail variants and look-alike company domains (remotely-limitbreak.com, celestium.store and celestium.exchange, lukso.bet, everdream-soft.com, astrabytesync.com). Each address is carried with the account GitHub credits it to, which is the account that registered it. Four addresses at domains that may belong to real businesses are left out, though the accounts that used them are carried.
    github.com/GitWorkHub8 — Chollima Hunter · under “Deleted accounts committing to the impersonation-company lure repositories (Contagious Interview)” · pulled 2026-09-28
  • …| | [GitWorkHub9](https://github.com/GitWorkHub9) | user | **Operator-owned** (suspend) | A | User id 272514006.…
    bryanchriswhite/dev-trap-dossiers — README — bryanchriswhite (dev-trap-dossiers) · under “Owning accounts and orgs” · published 2026-05-18 · pulled 2026-10-27

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: github.com/GitWorkHub8

Chollima Hunter lists 112 other indicators in this source. 7 are shown, chosen across types.

All 113 indicators from this source

Cited by the same report: bryanchriswhite/dev-trap-dossiers — README

bryanchriswhite (dev-trap-dossiers) lists 19 other indicators in this source. 5 are shown, chosen across types.

All 20 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.