Hacker News Reader

How exactly are they able to introduce exploits into his code?

Into whose code? He found several bugs and is now writing about it. I'm not sure if I understand your question?