← Remote Workers

https://github.com/maxcointech0000

https://github.com/maxcointech0000 is a GitHub account that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Socket and Anonhaven. The earliest of those reports is dated 2026-04-07 and the most recent 2026-04-08.

github profile Contagious Interview CURATED removed checked 2026-09-18

Listed as maxcointech0000

First seen 2026-04-07 · last seen 2026-04-08

Sources

• GitHub account in the April 2026 cross-ecosystem Contagious Interview wave: listed by Socket among the cluster's GitHub accounts and collaborators.

  North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads — Socket · published 2026-04-07 · pulled 2026-09-21

• Nearby text:

  …and GitHub Collaborators https://github.com/golangorg https://github.com/aokisasakidev https://github.com/maxcointech1010 https://github.com/maxcointech0000 GitHub Repositories formstash logutilkit dev-log log-base logger-base pino-debugger mit-license-pkg Filenames…

  North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads | Socket — Socket · under “Threat Actor’s Identifiers #” · published 2026-04-07 · pulled 2026-09-12

• …GitHub account github.com/aokisasakidev GitHub account github.com/maxcointech1010 GitHub account github.com/maxcointech0000 Response and what to do Socket reported all identified live malicious packages to the affected registries and submitted…

  Contagious Interview Hits npm, PyPI, Go, Rust, PHP — Anonhaven · under “Indicators of compromise” · published 2026-04-08 · pulled 2026-09-18

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads

Socket lists 27 other indicators in this source. 7 are shown, chosen across types.

• apachelicense.vercel.app domain
• aokisasaki1122@gmail.com email address
• bb2a89001410fa5a11dea6477d4f5573130261badc67fe952cfad1174c2f0edd file hash
• com.apple.systemevents file name
• https://github.com/maxcointech1010 GitHub account
• 66.45.225.94 IP address
• aokisasakidev/mit-license-pkg malicious repository

All 28 indicators from this source

Cited by the same report: Contagious Interview Hits npm, PyPI, Go, Rust, PHP

Anonhaven lists 9 other indicators in this source. 5 are shown, chosen across types.

• logkit.onrender.com domain
• shiningup1996@gmail.com email address
• 7c5adef4b5aee7a4aa6e795a86f8b7d601618c3bc003f1326ca57d03ec7d6524 file hash
• 9a541dffb7fc18dc71dbc8523ec6c3a71c224ffeb518ae3a8d7d16377aebee58 file hash
• https://github.com/aokisasakidev GitHub account

All 10 indicators from this source