Chollima Hunter

← Remote Workers

https://github.com/codemaestro11

https://github.com/codemaestro11 is a GitHub account that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies) and tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2025-04-19 and the most recent 2026-10-18.

The reporting files it under the persona Alex Lu, alongside 3 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-09-30

Listed as codemaestro11

First seen 2025-04-19 · last seen 2026-10-18

Sources

  • The GitHub account is read by hand from the first attached screenshot, a profile page headed Code Maestro with the handle codemaestro11, 56 repositories, and a README whose language breakdown is mostly TypeScript and Solidity. The post's own text states the two names and adds that the operator may attach the number 917 to email addresses; no address is shown, so none is recorded here. This is one of the names docs/x-source-backlog.md had been carrying as unresolved on the belief that it existed only inside an image. It is in the post's text, in a window the sweep never reached.
    x.com/browsercookies/status/1913719363401924854 — Cookie Connoisseur (@browsercookies) · under “Alex Lu / Yancy Dennis / Code Maestro / codemaestro11” · published 2025-04-19 · pulled 2026-08-30

  • Nearby text:

    …Alex Lu - Alexlu0917 - codemaestro11 - works with `cooldev900` / `silversoft0707` and `oldhand7` - github.com/alexlu0917 - github.com/CodeMaestro11/ - alexlu0917.dev@gmail.com - codeMaestro11@outlook.com - https://opensea.io/Alexlu0917 - https://web3.career/@alexlu0917 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Alex Lu” · published 2025-06-19 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Same persona record: Alex Lu

Other identifiers the reporting files under the same persona; 2 of 3 are shown.

All 3 on the Alex Lu page

Cited by the same report: x.com/browsercookies/status/1913719363401924854

Cookie Connoisseur (@browsercookies) lists 3 other indicators in this source. 1 are shown, chosen across types.

All 4 indicators from this source

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 9 are shown, chosen across types.

All 855 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.