CodeWall says it gained access to the consultant’s Pyxis platform using a username and password from public web code.