Perplexity 已开源 Bumblebee，这是一款旨在扫描开发者端点潜在供应链攻击向量的新工具。这款只读扫描器可盘点 macOS 和 Linux 系统上已安装的软件包、AI 代理配置以及编辑器/浏览器扩展。Bumblebee 旨在通过直接检查日益成为攻击者目标的本地开发者机器状态，来填补现有安全工具留下的空白。 AI
影响 通过识别开发者机器上潜在的供应链漏洞，增强使用 AI 工具和代理的开发者的安全性。
排序理由 该集群描述了一家公司发布一款旨在提高开发者安全性的新软件工具。
AI 生成摘要 · Google Gemini · 来自 3 个来源。 我们如何撰写摘要 →
Today we are open-sourcing one of the internal tools we use to protect the developer systems behind Perplexity, Comet, and Computer.
<p>Perplexity has open-sourced Bumblebee, an internal security tool it uses to protect the developer systems behind its search product, Comet, and Computer. Bumblebee is a read-only inventory collector for macOS and Linux developer endpoints. It scans npm, PyPI, Go modules, MCP c…
Perplexity has open-sourced Bumblebee, a read-only supply-chain scanner for developer endpoints that inventories packages, MCP configs, editor extensions and browser extensions without invoking any package manager. The tool targets supply-chain attacks on developer machines. http…