Comment by Stierlitz

"So how do we guard against this type of attack?"

Don't allow access to your 'secret' source code from the open Internet.