As far as I know, #Guix is not vulnerable to the xz backdoor. For one, we are on a much older version 😂 , along with not fitting what we know of how the backdoor is deployed (package type, systemd, argv[0]).

Statement on info-guix mailing list: https://lists.gnu.org/archive/html/info-guix/2024-03/msg00000.html

Recent security issues (guix-daemon and xz)