KnYuan is an alias used by the same threat actor as knaithe. The GitHub profile displays 'KnYuan Knaithe', and an older blog describes the author as a binary security researcher in Zhuhai. The operator's legal identity and state connections remain unconfirmed.