Perplexity Bumblebee: SBOMs scan repositories. EDR products watch running processes. Neither looks at the raw, on-disk state of a developer’s local environment, with lockfiles, extension manifests, and AI tool configs scattered across a home directory. That gap became very visible on May 11, when a group Google tracks as UNC6780 slipped malicious code into packages […]
English