Building a supply chain attack with .NET and NuGet
with Maarten Balliauw
Dienstag, 24. November 2026 um 18:00 Uhr
Hello, Bern .NET friends!
Thanks to our collaboration with the .NET User Group Zentralschweiz, we're meeting in November to explore another exciting topic that is increasingly on all of our minds.
Abstract
"Haha, npm had yet another supply chain attack!"
I'm waiting for the day this happens with .NET and NuGet. The tools are there! A number of interesting techniques exist to smuggle code into someone's codebase, malicious or genuine.
In this talk, we'll look at several .NET, NuGet and MSBuild techniques to inject code into a software supply chain. We'll also look at some ways to mitigate the risk (but you can't eliminate it).
About
Maarten loves building web and cloud apps. His main interests are in .NET web technologies, C#, Microsoft Azure and application performance. He is Head of Customer Success at Duende Software. Creator and maintainer of https://speaker.travel. He's an ASP Insider and former Microsoft MVP. Maarten is a frequent speaker at various national and international events and organizes Azure User Group events in Belgium. In his free time, he brews his own beer. Maarten's blog can be found at https://blog.maartenballiauw.be.
Noch
Dienstag, 24.11.2026
Uhrzeit
18:00 - 21:00 Uhr
Veranstaltungsort
M&S Software Engineering AG
Hilfikerstrasse 4 - Bern