The news that XZ Utils, a utility present in most Linux distributions, has been backdoored has rattled the open-source software community.