`https://github.com/tysonstar912913`

https://github.com/tysonstar912913 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from meow mfer (@meow_mfer). The report is dated 2026-04-17.

The reporting files it under the persona tysonstar912913, alongside 2 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-30

First seen 2026-04-17 · last seen 2026-04-17

live checked 2026-09-30

The image is the avatar this account displays, not evidence of who operates it.

Source

A fourteen-post thread on the accounts that worked on Tokamak Network's bridge front end, marketplace and subgraph between November 2023 and February 2025, read as a single cell from the primary account's following list, commit-email forensics, renamed and deleted handles, and account-creation dates clustered within days of each other. Every value here is stated in the thread; post thirteen is the researcher's own address map for the cell. Listed in the primary account's following list and in the address map. The persona Adam Lee, captured in this file from a June 2025 reply, is the same holder; the reasoning is recorded in that entry. Its address tyson.star.912.913@gmail.com and the tyson.star.912913@gmail.com recorded here are one Gmail mailbox, and the commit walk of 2026-09-19 found the same two author lines committing across both accounts' repositories.
x.com/meow_mfer/status/2045107378249720221 — meow mfer (@meow_mfer) · under “tysonstar912913” · published 2026-04-17 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created	2021-10-01
Repositories	37 original, 0 forked
History older than the account	1 repository: `react-todo-app` (first commit 2017-02-11)
Commits copied into others' repositories	6
Commit identities	1 address, 2 names

Follows these indexed accounts

Followed by these indexed accounts

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-10-12. 1 other commit address is held for review rather than listed. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.

Related indicators

Same persona record: tysonstar912913

Other identifiers the reporting files under the same persona.

Cited by the same report: x.com/meow_mfer/status/2045107378249720221

meow mfer (@meow_mfer) lists 6 other indicators in this source.