English Français العربية

io.github.NOTTIBOY137/update-hijack-poc

Official registry Search and web

PoC benign MCP server for update-hijack security research

Source code

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @nottiboy1337/mcp-update-hijack-poc
Claude Code 
claude mcp add update-hijack-poc -- npx -y @nottiboy1337/mcp-update-hijack-poc@1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "update-hijack-poc": {
            "command": "npx",
            "args": [
                "-y",
                "@nottiboy1337/mcp-update-hijack-poc@1.0.1"
            ]
        }
    }
}

Frequently asked questions

What is io.github.NOTTIBOY137/update-hijack-poc?

PoC benign MCP server for update-hijack security research

How do I install io.github.NOTTIBOY137/update-hijack-poc?

It runs on your machine. In Claude Code: claude mcp add update-hijack-poc -- npx -y @nottiboy1337/mcp-update-hijack-poc@1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.NOTTIBOY137/update-hijack-poc need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.NOTTIBOY137/update-hijack-poc open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.NOTTIBOY137/update-hijack-poc?

It is published by NOTTIBOY137. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.