Stomp47/rekt-db
Stomp47/rekt-db is a malicious repository
that one published source reports
in connection with unclustered DPRK activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Proofpoint.
The report is dated 2026-06-05.
malicious repository DPRK (cluster unattributed) CURATED Taken down
Source
-
Actor-controlled repository from Proofpoint's UNK_DeadDrop campaign of April to May 2026, in which recruitment and code-review phishing sent developers at close to a hundred organisations to repositories whose Visual Studio Code tasks ran a cross-platform loader. Proofpoint assesses the actor as very likely North Korea-aligned and notes tactical alignment with Contagious Interview without direct overlap in its own data, so the cluster is recorded as unattributed DPRK.
Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency — Proofpoint
Find this indicator in the index, or see every malicious repository this site holds under Malicious repositories in the browse listing.