"Maximally one underscore", like "maximally n anything", is easiest done adding a negative lookahead after the start anchor:

/^(?!.*_.*_)\w*[A-Za-z]\w*$/
[download]

(That is also the most readable way, IMO, and not too slow, though if execution speed is an issue, doing it as a single regex is probably wrong anyway.)