Security researchers warn of code execution risks in .NET build process