Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard

Perplexity's Bumblebee is an open-source, read-only scanner for macOS and Linux developer machines that checks language package managers (npm, PyPI, Go modules, RubyGems, Composer, etc.), VS Code-family editor extensions, Chromium/Firefox browser extensions, and AI Model Context Protocol configurations against a JSON threat catalog. Designed to avoid running package managers or install scripts, Bumblebee provides deterministic, catalog-driven exact-match detections (baseline/project/deep profiles) to help security teams assess developer exposure during supply‑chain advisories without executing potentially compromised tooling.