I think it unlikely someone would design something complicated like a new compiler / programming language, open source it and attach their real name to the proj

I think it unlikely someone would design something complicated like a new compiler / programming language, open source it and attach their real name to the project just to hide an exploit in it. There's much lower hanging fruit.