tl;dr: When dropbox asks for your admin password it stores it in it's own cache to keep having access and perform admin-level tasks.
It's not a hack, it's you giving away your credentials on a screen that's designed to look like a system password prompt.
A Dark UI pattern at most, and a security leak whenever someone hacks the dropbox auth storage. Not a hack, just clickbait.