MCP server

Update Hijack Poc

io.github.NOTTIBOY137/update-hijack-poc

Checked 27 Oct 2026, 08:19 UTC · Removed from its registry; checked against OSV.dev; never run by us

PoC benign MCP server for update-hijack security research

Runs on your computerRemoved from its registry: not on npm (version 1.0.1)

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 27 Oct 2026, 08:19 UTC

Connect it to your agent

Claude Code

claude mcp add update-hijack-poc -- npx -y @nottiboy1337/mcp-update-hijack-poc@1.0.1

Claude Desktop

{"mcpServers":{"update-hijack-poc":{"command":"npx","args":["-y","@nottiboy1337/mcp-update-hijack-poc@1.0.1"]}}}

Codex (config.toml)

[mcp_servers.update-hijack-poc]
command = "npx"
args = ["-y","@nottiboy1337/mcp-update-hijack-poc@1.0.1"]

Gemini CLI

{"mcpServers":{"update-hijack-poc":{"command":"npx","args":["-y","@nottiboy1337/mcp-update-hijack-poc@1.0.1"]}}}

Cursor

{"mcpServers":{"update-hijack-poc":{"command":"npx","args":["-y","@nottiboy1337/mcp-update-hijack-poc@1.0.1"]}}}

VS Code

{"servers":{"update-hijack-poc":{"type":"stdio","command":"npx","args":["-y","@nottiboy1337/mcp-update-hijack-poc@1.0.1"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

Front Sentinel
Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
SiteCheck Web Intel
129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
GeneBe
Annotate and classify human genetic variants with GeneBe (ACMG, gnomAD, ClinVar). Research use only.
Cognita
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
StealthGuard 402
Stealth web extraction, Polymarket alpha, and on-chain pre-trade gating via x402 on Base.
BlackVeil DNS & Email Security Scanner
DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
TAP Certified
Check if an AI agent is certified; list the TAP Registry and certifications. Free, read-only.
RankRoot: AI visibility audit
Audit a site's visibility to ChatGPT, Perplexity, Claude and AI agents. Generates llms.txt.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.NOTTIBOY137/update-hijack-poc.svg)](https://aptlynx.net/servers/io.github.NOTTIBOY137/update-hijack-poc)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents