Perplexity has released Bumblebee, an open-source security tool designed to scan developer systems for compromised packages and malicious configurations. Bumblebee employs a read-only scanning method, analyzing local metadata and configuration files without executing programs, thus minimizing the risk of triggering malicious code. This approach is particularly effective against supply chain attacks, where malicious scripts may execute during package installation. Bumblebee uniquely inspects MCP configuration files, which determine AI assistants' external service connections, to prevent unauthorized access to sensitive data. It also checks browser extensions and editor plugins across multiple platforms. The tool was developed in response to a recent attack by TeamPCP, which compromised over 160 software packages. Bumblebee is available on GitHub under the Apache 2.0 license, allowing external teams to enhance their security measures by maintaining threat catalogs and running scans locally.