When random.bytes() runs but doesn't work

This post assumed that the author of the "runs" commit was not acting maliciously. Has that been established? It's not mentioned in this article.