Perplexity Open-Sources Bumblebee: A Read-Only Supply-Chain Scanner for Developer Endpoints

Perplexity open-sourced Bumblebee, an internal Go-based scanner for developer endpoints.

It inventories macOS and Linux machines in one pass, outputting NDJSON with package metadata, lockfiles, extensions, and MCP configs.

The tool covers ecosystems like npm, PyPI, VS Code, Cursor, browsers, and other developer tools.

Security teams can use it to quickly find laptops exposed to newly disclosed supply-chain, package, extension, or AI-tool vulnerabilities.