I'm pretty sure the code shown is the "hacker"'s code, for demo's sake. That said, the server address redacted out doesn't appear to be a Yahoo domain from what I can see. That tells me that it's a third-party that was broken into.