`https://github.com/jemelitodev`

https://github.com/jemelitodev is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Hunter. The report is dated 2026-09-18.

The reporting files it under the persona Jemelito Constantino, alongside 7 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud CURATED live checked 2026-09-18

First seen 2026-09-18 · last seen 2026-09-18

live checked 2026-09-18

The image is the avatar this account displays, not evidence of who operates it.

Source

Read on 18 September 2026 from GitHub's user search on the persona's name, which returned two accounts under it. JCRhyle, created 1 October 2024, carries a profile README headed Jemelito Constantino, AI/ML Engineer, Full-Stack Developer, Web3 BD and VC Scout, Philippines, that links a LinkedIn account, the X account JCRhyle and the gmail address, and names Victus Global and PHI Finance as current engagements; its portfolio repository points at a Vercel deployment that no longer exists. JemelitoDev, created 13 May 2026, states the second address and holds one repository reading Hello world. A freelancermap profile under the same name, created 9 August 2024 and last logged into on 3 December 2024, gives Surigao City, the title Senior Blockchain and Full Stack Developer, freelancing since 2017, and four roles from April 2021 to April 2024 at Azra Games, HeroSwap, MarsNext and MDEX Global; the LinkedIn account the README links gives, for the same years, CoachCare and ChickenDerby, so the identity carries two employment histories for 2021 to 2024 that share no employer. A Fiverr seller under the handle jemelito, Philippines, describes itself as a collective of professionals offering virtual assistant, web development and blockchain services. The LinkedIn account sits in this site's candidate queue rather than in this entry, where its account history and verification are recorded. The name is what links this account to the rest; nothing here establishes that one person holds both, and the entry records what the account itself states. Read again on 18 September 2026: the portfolio repository on JCRhyle carries two commits authored ruijindev0801 <ruijin.developer@outlook.com> beside its two under this account's own address, which is a value this account publishes rather than a name it shares, and that login is filed on this site under the persona Rui Jin.
github.com/JemelitoDev — Chollima Hunter · under “Jemelito Constantino” · pulled 2026-09-18

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created	2026-05-13
Repositories	1 original, 0 forked
History older than the account	0 repositories
Commits copied into others' repositories	0
Commit identities	0 addresses, 0 names

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-10-05. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.

Related indicators

Same persona record: Jemelito Constantino

Other identifiers the reporting files under the same persona; 6 of 7 are shown.

All 7 on the Jemelito Constantino page

Cited by the same report: github.com/JemelitoDev

Chollima Hunter lists 1 other indicator in this source.