Musk's 'DOGE' boy who "resigned" was apparently doing something very naughty with the Treasury's code

Where is the ‘apparently’ coming from? Only logic is that he had write access so he must’ve done something?