Attackers are always after your source code! Source code is very leaky and often contains sensitive information like secrets (APi keys or credentials).