dantelabservice

Surfaced by DPRK_Dev_Star, an anonymous expose account that narrates in an operator voice to out DPRK developer infrastructure. The first post names the GitHub account adammajoros250 as a source of base64-encoded API keys used to conceal malicious injects in repositories, and gives a GitHub code search that finds the injected pattern. The second presents a fabricated software-company front: the GitHub organization dantelabservice, a repository named Cartid said to hide malicious code, and the site dantelabs.us offered as a way to contact the operators. Both GitHub accounts returned a 404 when checked on 2026-09-11, consistent with removal after the exposure. The handle has no connection to any legitimate business of a similar name; the values recorded here are the specific accounts and domain the researcher cited.

Surfaced by DPRK_Dev_Star, an anonymous expose account that narrates in an operator voice to out DPRK developer infrastructure. The first post names the GitHub account adammajoros250 as a source of base64-encoded API keys used to conceal malicious injects in repositories, and gives a GitHub code search that finds the injected pattern. The second presents a fabricated software-company front: the GitHub organization dantelabservice, a repository named Cartid said to hide malicious code, and the site dantelabs.us offered as a way to contact the operators. Both GitHub accounts returned a 404 when checked on 2026-09-11, consistent with removal after the exposure. The handle has no connection to any legitimate business of a similar name; the values recorded here are the specific accounts and domain the researcher cited.

Surfaced by DPRK_Dev_Star, an anonymous expose account that narrates in an operator voice to out DPRK developer infrastructure. The first post names the GitHub account adammajoros250 as a source of base64-encoded API keys used to conceal malicious injects in repositories, and gives a GitHub code search that finds the injected pattern. The second presents a fabricated software-company front: the GitHub organization dantelabservice, a repository named Cartid said to hide malicious code, and the site dantelabs.us offered as a way to contact the operators. Both GitHub accounts returned a 404 when checked on 2026-09-11, consistent with removal after the exposure. The handle has no connection to any legitimate business of a similar name; the values recorded here are the specific accounts and domain the researcher cited.

Surfaced by DPRK_Dev_Star, an anonymous expose account that narrates in an operator voice to out DPRK developer infrastructure. The first post names the GitHub account adammajoros250 as a source of base64-encoded API keys used to conceal malicious injects in repositories, and gives a GitHub code search that finds the injected pattern. The second presents a fabricated software-company front: the GitHub organization dantelabservice, a repository named Cartid said to hide malicious code, and the site dantelabs.us offered as a way to contact the operators. Both GitHub accounts returned a 404 when checked on 2026-09-11, consistent with removal after the exposure. The handle has no connection to any legitimate business of a similar name; the values recorded here are the specific accounts and domain the researcher cited.