Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.
The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.