Perplexity open-sources Bumblebee scanner and BrowseSafe prompt-injection benchmark
AravSrinivas · x · 2026-07-29
What happened
Perplexity open-sourced Bumblebee, a read-only scanner for macOS and Linux developer machines. It looks for risky packages, extensions, and AI tool configurations on disk, and can trigger deeper scans when new supply-chain risks appear.
Why it matters
- The tool is aimed at software supply-chain exposure on developer endpoints.
- It is intentionally read-only, so it inventories metadata rather than modifying systems.
- The repository positions Bumblebee as a response tool for finding machines that match a newly disclosed advisory.
Related security work
The thread also points to BrowseSafe, an open benchmark for protecting browser-based AI agents against prompt injection on websites.
- The benchmark is built from realistic HTML payloads.
- It focuses on attacks that can change real actions, not just text output.
- The paper evaluates existing defenses across frontier models and argues for a layered defense strategy.
Takeaway
This is a strong signal that browser agents and developer endpoints are becoming a real security surface, with both tooling and benchmarks now being open-sourced around that problem.
Related event: Perplexity Open-Sources Bumblebee Scanner and BrowseSafe Benchmark(2 posts)→
More from Safety
- Hundreds of Thousands of Tons of Books Landfilled Annually: AI Training as a Better Alternative — aronchick · 2026-07-29
- Reddit asks whether NeurIPS ethics reviewers were fooled by conference-side prompt injection — dontknowwhattoplay · 2026-07-29
- A judge ruled bulk book scanning for AI training can qualify as fair use — gnukeith · 2026-07-29
- Gemini CLI patch closes an SSRF bug by adding async DNS checks before fetch — deepresearcher08 · 2026-07-29
- LLM shopping agents covertly steered users toward sponsored products in a study of 2,012 people — manoelribeiro · 2026-07-29
- Kevin Bankston says Anthropic’s book destruction follows the logic of recent copyright rulings — AndyMasley · 2026-07-29