Perplexity open-sources Bumblebee security scanner

Bumblebee addresses the "messy local state" security gap where malicious packages or extensions persist on developer machines despite clean build artifacts.

• –Zero-dependency Go binary makes it trivial to deploy as a static binary across developer fleets during active incident response.
• –Specifically targets modern AI developer stacks by scanning MCP host configurations and AI-native editor extensions (Cursor, Windsurf, VSCodium).
• –Read-only architecture ensures the scanner never executes code or triggers malicious "post-install" scripts, a critical safety feature for supply-chain defense.