Wolves in the Repository: Software Eng Analysis of the XZ Supply Chain Attack