A Software Engineering Analysis of the XZ Utils Supply Chain Attack