Besides, the code was only for the token sale, which I don't think is valid now.

Nevertheless it is prudent that Populous have good audit on every code written, to make sure everything is 100% safe and secure.