Thanks - That means if it wasn't in that code then it's a coincidence right? How are the passwords compromised then? I didn't see anything about passwords in that code.
Sorry for the stupid questions, i'm not a programmer.
the hacker obtained admin status and was able to run arbitrary code. The cosby javascript was just one symptom of the hack, just one thing they did of the many things that they were able to do. They also could have taken the password hashes or pretty much do anything