io.github.NOTTIBOY137/update-hijack-poc
not probeable (local package)
Unclaimed · Unverified
Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.
Publisher-provided description
PoC benign MCP server for update-hijack security research
Summary by lookupd
Proof-of-concept server for researching update-hijacking risks in MCP installs; it offers no production tools for agents to use.
Install
Claude Code, npm package (stdio)
claude mcp add update-hijack-poc -- npx -y @nottiboy1337/mcp-update-hijack-poc
Codex, npm package (stdio)
codex mcp add update-hijack-poc -- npx -y @nottiboy1337/mcp-update-hijack-poc
Cursor, npm package (stdio) → .cursor/mcp.json
{
"mcpServers": {
"update-hijack-poc": {
"command": "npx",
"args": [
"-y",
"@nottiboy1337/mcp-update-hijack-poc"
]
}
}
}Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.
Details
- Version: 1.0.1
- Transports: stdio
- First indexed:
- Last seen in registry:
- Repository: https://github.com/NOTTIBOY137/mcp-update-hijack-poc
Badge for your README
Shows this live status and links here; updates hourly.
[](https://lookupd.com/servers/io.github.NOTTIBOY137/update-hijack-poc)
- 62141 servers
- Last crawl: 2026-11-11T18:39:04.612Z
- API base:
https://api.lookupd.com - MCP URL:
https://api.lookupd.com/mcp