The source maps suspected North Korean IT-worker GitHub accounts and aliases around the codezs17 cluster. It links Cryptogru, formerly aidenwong812 and alternatively Donald-romeo-1100, to initial commits, then describes codez17 replacing references to cryptogru812 with madara1793. The write-up notes overlapping profile imagery, the “Brody Swift” alias, new Brody- and Mars-themed accounts following or stargazing codezs17, and Kali1793 appearing as a coauthor while matching the earlier “1793” naming pattern. The included email addresses provide leads for tracking account linkage and identity reuse in DPRK remote-worker fraud investigations.