https://github.com/generalxdev

https://github.com/generalxdev is a GitHub account that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Narcass3 (@Narcass3) and Chollima Hunter. The earliest of those reports is dated 2025-05-12 and the most recent 2026-09-24.

The reporting files it under the persona Jeremy Michael, alongside 8 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud CURATED live checked 2026-09-02

First seen 2025-05-12 · last seen 2026-09-24

Sources

  • The first post is a bare list published under the word "btwz" with no operator named. The second post, from the same day, addresses the X accounts jeremymichael79 and Hakeohiratani directly and asks how Pyongyang is, which is the researcher treating both handles as DPRK operators. The two handles are recorded here on that basis. The list itself is still not split between them, because the posts do not say which account holds which identifier, and dividing it would be this site's inference rather than the researcher's. The first post also gives a web3.career handle, which has no indicator type in this repository. The address alexandersimmons824@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author. The address audithunter821@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
    x.com/Narcass3/status/1921805220478149068 — Narcass3 (@Narcass3) · under “Accounts the researcher addressed to jeremymichael79 and Hakeohiratani” · published 2025-05-12 · pulled 2026-08-30
  • Read 2026-09-24 by searching GitHub commits for the persona's address. generalxdev, created in February 2024, displays the name Jeremy Michael and Nyssa, Oregon, the persona's own location. GitHub credits it with commits signed alexandersimmons824@gmail.com, the address on the Alexander Simmons frontend résumé that also carries this persona's number.
    github.com/search?q=author-email%3Aalexandersimmons824%40gmail.com&type=commits — Chollima Hunter · under “Jeremy Michael” · pulled 2026-09-24

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Same persona record: Jeremy Michael

Other identifiers the reporting files under the same persona.

Cited by the same report: x.com/Narcass3/status/1921805220478149068

Narcass3 (@Narcass3) lists 6 other indicators in this source. 3 are shown, chosen across types.

All 7 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.