Bumblebee: A zero-dependency Go scanner for malicious MCP servers and extensions

Perplexity AI recently open-sourced Bumblebee, a read-only supply chain scanner written in Go 1.25 that audits MCP servers, dependencies, and editor extensions.