Inner classes are translated into classes that are accessible at package scope and may expose code that the programmer intended to keep private to attackers.