Ask HN: Noisetorch could be compromised, what can be done to audit it right?

As the maintainer pointed out, one of his systems was compromised.

What can be done to audit it properly? I would love some feedback from people in security area, however any tip (even if you are not experienced is welcome).

Related issue in this audit: https://github.com/lawl/NoiseTorch/issues/254