Perplexity is open-sourcing Bumblebee

Perplexity has open-sourced Bumblebee, a read-only Go-based scanner for macOS and Linux developer endpoints that helps security teams identify exposure to risky software packages, editor and browser extensions, and AI agent configurations during supply-chain incidents. The tool uses organization-maintained catalogs of vulnerable components, which can be updated from public disclosures, intelligence feeds, or internal research through a reviewed workflow, then scans endpoints using baseline, project-specific, or incident-response deep profiles. Unlike repository-focused SBOM and vulnerability scanners or application inventory tools, Bumblebee examines local developer environments across language package managers, MCP configurations, VS Code-family extensions, and Chromium- and Firefox-based browser extensions. It reads metadata such as manifests, lockfiles, and installed package information without invoking package managers, executing code, reading source files, or monitoring network and process activity, reducing the risk that scanning itself triggers malicious install-time scripts.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.