Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard
Follow ZDNET: Add us as a preferred source on Google.
ZDNET's key takeaways
- Perplexity Bumblebee is an open-source developer security program.
- Bumblebee doesn't require AI or a subscription.
- The program aims to spot problems on programmers' laptops.
If you're a programmer, you're painfully aware that there's been a flood of successful malicious attacks on your software supply chain. These attacks include the Axios npm package compromise, the PyPI LiteLLM AI attack, and the CanisterSprawl npm assault.
What's a programmer to do when they can't even trust the very building blocks of their program? Well, there are several approaches, and the latest comes from Perplexity.
According to the AI company, Bumblebeeis a "read‑only scanner we use to check developer machines for risky packages, extensions, and AI tool configs during supply‑chain incidents." The company said in its announcement that the program is one of "the internal...
Copyright of this story solely belongs to zdnet.com. To see the full text click HERE
