If it is true and clear that the developer tampered with the codebase because of a personal issue with another developer, I am not even sure that is an issue to let HR resolve; I would want that developer fired immediately. Intentionally fucking with the product, or any other sort of company property, is inexcusable in my mind. Tanking the reputation of that developer is putting it nicely.