Perplexity open-sourced the scanner it uses to triage npm worm waves. Bumblebee reads on-disk metadata only, never runs the package manager during a compromise. Exact (ecosystem, name, version) matching. 2,900+ stars in 5 days. Apache-2.0.

→ View original post on X — @alphasignalai,