"Injecting code," is not the way I'd describe making changes to a product that it's your job to maintain.
My understanding from articles I've read is that it wasn't her job to maintain the product. It was her first time interacting with that code base, and she intentionally altered the defaults of the code review tool so that the team responsible for the extension wouldn't be informed of her changes.