https://github.com/degenkrypto
https://github.com/degenkrypto is a GitHub account
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies) and meow mfer (@meow_mfer).
The earliest of those reports is dated 2025-08-01 and the most recent 2026-05-10.
github profile IT Worker Fraud RESEARCHER POST live
live
Sources
-
The post publishes the following list of the kstar0102 persona, which this repository already documents, and reads the list itself as the finding: in the researcher's words it is thick with North Korean flags. These five accounts are carried as a group rather than as personas because that is the level the claim is made at -- the researcher asserts the company the account keeps, not an identity for each member of it. Two names on the same screenshot are deliberately absent. Oleksii Taranenko has an entry of his own here from other posts, and the remaining account belongs to a publicly known developer in Tokyo with an ordinary professional presence, who appears in the list for the same reason these personas follow any real engineer, and who is recorded in the held-back list so a later pass over this screenshot does not sweep him in.
x.com/browsercookies/status/1951110041047855169 — Cookie Connoisseur (@browsercookies) -
The researcher names these accounts and addresses as collaborators on repositories shared with anthon-dev, and links them to that operator rather than identifying them as it. They are recorded here without a persona so the link stays the researcher's and is not flattened into an identity.
x.com/meow_mfer/status/2053433657680142734 — meow mfer (@meow_mfer)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.
Account analysis
| Account created | 2023-12-11 |
|---|---|
| Repositories | 45 original, 21 forked |
| History older than the account | 19 repositories: base-nft-market (first commit 2022-02-01), ChatGPT-MERN (first commit 2023-03-21), crypto-investment-backend (first commit 2023-10-25), crypto-investment-frontend (first commit 2023-10-20), DEX-LiquidityPool (first commit 2021-09-26) |
| Commits copied into others' repositories | 1 |
| Commit identities | 2 addresses, 6 names; up to 6 names on one address; up to 3 addresses under one name |