https://github.com/hasanguray
https://github.com/hasanguray is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Chollima Hunter.
The report is dated 2026-09-24.
The reporting files it under the persona jajeni83, alongside 3 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
github profile IT Worker Fraud CURATED removed
removed
Source
-
Found on 24 September 2026 by searching GitHub's commit index for the address browsercookies published for this persona in the profile-picture thread of 17 May 2025. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so a former handle is a matter of record; and GitHub attributes a commit to whichever account has its address registered, which only the address's holder can do. github.com/huaming422 is account id 95515037, created on 4 December 2021, display name Huaming Wang, bio Senior FullStack, Mobile & Blockchain Developer. Its noreply addresses show it has also been named jajeni83, the persona's address as a handle, crypto422 and phillip422, among others. Twenty-six of its repositories hold 60 commits signed jajeni83@gmail.com, dated May 2022 to May 2023, and it signs its own recent commits huamingwang422@gmail.com. GitHub attributes jajeni83@gmail.com to the login hasanguray, which no longer resolves; it is recorded as the account that held the address.
github.com/hasanguray — Chollima Hunter
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.