Bumblebee
Perplexity's answer to the supply-chain attack wave
What it is
A read-only scanner for developer machines that inventories lockfiles, installed packages across npm, PyPI, Go, RubyGems, and Composer, browser and editor extensions, and MCP server configurations — so when an advisory names a compromised package, you can answer 'which machines have it?' immediately.
Why it's interesting
A timely response to the npm and extension supply-chain attacks of the past two years, and one of the first tools to treat the MCP ecosystem itself as an attack surface. Read-only by design: it never executes package managers.
Use cases
- Fleet-wide incident response when an advisory drops
- Continuous developer-machine inventory
- Auditing which MCP servers are configured where
Who it's for
Security and IT teams; individual developers who install things
Setup
Easy. A single Go binary; macOS or Linux; no runtime dependencies
Limitations & cautions
Detection is metadata-based, so payloads that hide outside manifests will not be caught. No Windows support yet, and you still need to feed it advisory data to match against.
Editorial takeaway
The MCP boom created a new attack surface faster than anyone built defenses. This is the defense showing up.