As SolarWinds spooks tech firms into rechecking code, some won’t like what they find