https://github.com/d0sc4u
https://github.com/d0sc4u is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Kawaii Jong UwUn (@KawaiiJongUwUn).
The report is dated 2026-04-10.
The reporting files it under the persona Nelo Labhart, alongside 7 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
github profile IT Worker Fraud RESEARCHER POST removed
removed
Source
-
Four posts across December 2025 and April 2026 following one member of the team behind HyperbuildX as the persona changes: the first two record the Nelo Labhart persona giving way to d0sc4u, with a web3.career profile under meta0xflip still pointing at a portfolio that had carried Nelo Labhart and 0xopsdev branding; the third names d0sc4u among the North Koreans behind MutantRolls; the fourth gives tok3ner, Nelo Labhart and d0sc4u as one person behind HyperbuildX, spinx_game and MutantRolls, with the GitHub account. The 0xopsdev and HyperbuildX accounts already reach this site from tayvano's research and from ketman.org. Two posts of 16 April 2026 add a fresh set of names. The first quotes a post by the X account 0xnsfwfa, since deleted, that the researcher reads as the same operator back under a new name, and lists d0sc4u, Meta0xFlip, Nelo Labhart and ZireaelGit together; the account's surviving posts promote a Raydium token sniper hosted at github.com/meta0xflip. The second reproduces a commit by the GitHub account 0xnewegg to its discord-betting-lottery-bot repository, authored as 0xNewEgg <nelo.labhart@gmail.com>, that changes the README's Telegram contact from doscau (t.me/d0sc4u) to NewEgg (t.me/newegger). Meta0xFlip and ZireaelGit are listed without a platform and are not recorded here.
x.com/KawaiiJongUwUn/status/2042750269453226420 — Kawaii Jong UwUn (@KawaiiJongUwUn)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.