Bumblebee Open Source: Read-Only Scanner for AI Tool Supply Chain
Perplexity open-sources Bumblebee, a read-only metadata scanner for security issues in package managers, IDE plugins, browser extensions, and AI tool configs.
Bumblebee, originally developed as an internal Perplexity tool, is now open as .
It’s a read-only scanner that checks for security issues in:
- Package managers;
- IDE plugins;
- Browser extensions;
- Claude, Cursor, Codex configs, and other AI tools.
Only metadata is scanned. This ensures that the scan itself won’t become an entry point for an exploit.
Comments
Weekly digest
The best of vibe coding, AI agents and open source — once a week, no spam.
Related articles
All articlesNVIDIA Releases SkillSpector: Open-Source Agent Skill Security Tool
SkillSpector by NVIDIA is an open-source tool to find vulnerabilities in agent skills, including prompt injection, data leaks, unsafe code, and dependencies.
OpenClaw 2026.4.23 Released: Media Generation, Agents & Security
OpenClaw 2026.4.23 adds Codex OAuth for gpt-image-2, OpenRouter image gen/edit, better agent stability, improved memory, and security hardening.
Inspo Inspo MCP Server Launches Free Open‑Source Design Agent
Inspo Inspo, a free open‑source MCP server, lets AI agents fetch design examples from 800+ sites and generate high‑quality UI mockups via Claude Code, Codex or OpenCode.