This is almost certainly what happened. The first commit has 400k+ files, there is no way one person audited that.

The project has tell tale signs of eyes free coding and ralph-like loops.