Every claim on this profile comes from the sources cited on it. Nothing has been added or inferred.
Pak Hyon Song (박현성; Hyon-Song Pak in the report) is profiled here as a member of the North Korean IT-worker cell that GitLab Threat Intelligence assesses is managed by Kang Kil Nam and is highly likely colocated and operating from Beijing. GitLab's assessed organization chart places Pak Hyon Song as a cell member in Working Group One. On the cell's own performance slide for the third quarter of 2025, which the report reproduces, Pak Hyon Song (박현성) ranks 4 of seven, with 9,800 against target, 65 percent.
GitLab reports that the cell's personnel dossiers describe every member as a researcher at the Kim Il-sung University Joint Research Center in Beijing (베이징주재 김일성종합대학 공동연구중심 연구사), and suggests the cell's presence in China may be under an academic pretext.
The confidence level of 'medium' reflects that the name comes from GitLab's assessed organization chart and the cell's internal records as GitLab reads them. It is a private company's assessment, not a criminal charge, a sanctions designation or a court finding.
Identity photograph shown above the name Hyon-Song Pak on the organization chart of the Beijing cell published in the cited GitLab Threat Intelligence report, which GitLab describes as its assessment. Cropped from the report's image and reproduced for identification.Source: about.gitlab.com
Threat-intelligence report details
Status: Named on the organization chart of a North Korean IT-worker cell in Beijing published by GitLab Threat Intelligence on February 19, 2026
Name as printed
Hyon-Song Pak on GitLab's organization chart; 박현성 on the cell's performance slides
Role on GitLab's assessed organization chart
Cell Member, Working Group One
Q3 2025 result on the cell's performance slide
Ranked 4 of seven, 9,800 against target (65 percent), under the initials PHS
Nationality
North Korean, per the report
Sources
Every factual claim on this page is drawn from the public records listed below.
