The original title is: "Bumblebee: Perplexity AI Open-Sources a Safe Supply-Chain Scanner"

Short summary

Perplexity AI released Bumblebee, an open-source static analyzer that audits developer workstations for supply-chain vulnerabilities without executing untrusted code. It scans package managers, IDE extensions, and MCP server configurations across macOS and Linux, outputting structured NDJSON for SIEM integration. The tool is a single Go binary with zero dependencies, making it easy to distribute via MDM across an organization.

• •Bumblebee is a read-only static analyzer for developer workstation security
• •Scans npm, PyPI, Go modules, RubyGems, PHP Composer, plus Cursor/VS Code extensions and MCP configs
• •Single Go binary with NDJSON output, distributable via MDM for enterprise security audits

Generated with AI, which can make mistakes.