The spyware was designed to pop up notifications on visiting URLs to users, she just added another message for a url.

"Part of my job was to write browser notifications so that my coworkers can be automatically notified of employee guidelines and company policies while they surf the web. "

I'd be curious to know what URLs employees get alerts about? Perhaps services which do not take kindly to seeing IPs from Google offices?