Building a Supply Chain Attack With .NET and NuGet | Maarten Balliauw | .NET Day 2026

"Haha, npm had yet another supply chain attack!" I'm waiting for the day this happens with .NET and NuGet. The tools are there! A number of interesting techniques exist to smuggle code into someone's codebase, malicious or genuine. In this talk, we'll look at several .NET, NuGet and MSBuild techniques to inject code into a software supply chain. We'll also look at some ways to mitigate the risk (but you can't eliminate it). Speaker: Maarten Balliauw, Duende Software Blog: https://blog.maartenballiauw.be/ LinkedIn: https://www.linkedin.com/in/maartenballiauw/ Bluesky: https://bsky.app/profile/maartenballiauw.be X: https://twitter.com/maartenballiauw/ Recorded at JetBrains .NET Day Online 2026, a free online event for the .NET community. Watch all .NET Day 2026 talks: https://www.youtube.com/playlist?list=PLDygEnTxhRkc Explore JetBrains tools for .NET: https://www.jetbrains.com/dotnet/ #JBDotNetDay #dotnet #csharp