The backdoored templates have another uid 0 user called "openvm" with password "password".
This is meant strictly for testing and experimenting, when due to cloud-init failures or other you cannot login normally.
DO NOT USE IN PRODUCTION!