I would be more interested in the security implications. Hackers now have access to the source code; what kind of attack surfaces does this yield against custom

I would be more interested in the security implications. Hackers now have access to the source code; what kind of attack surfaces does this yield against customers who purchased the compromised software?