That's not the actual hack though, it's with an extension. You could have gotten compromised this way through an extension for git or whatever.