mcpbeat

Update Hijack Demo MCP Server

io.github.NOTTIBOY137/update-hijack-demo
local only

Update Hijack Demo runs on your own machine — the client starts it, so there is no endpoint to ping. 57 installs a week from npm.

Demo: Server update hijack PoC (clean copy for video)

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 27 · avg 8 · +63% w/w
a month agotoday
57
Installs / week
npm · @nottiboy1337/mcp-update-hijack-demo
—
Stars
on GitHub
—
Last commit
0 releases in 90 days
—
License
language unknown

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add update-hijack-demo -- npx -y @nottiboy1337/mcp-update-hijack-demo
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.update-hijack-demo]
command = "npx"
args = ["-y", "@nottiboy1337/mcp-update-hijack-demo"]
.cursor/mcp.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ],
      "command": "npx"
    }
  }
}

Update Hijack Demo — questions

Answers built from our own checks of this server.

Why is there no uptime for Update Hijack Demo?
Update Hijack Demo runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @nottiboy1337/mcp-update-hijack-demo was installed 57 times last week.
Is Update Hijack Demo still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect Update Hijack Demo?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @nottiboy1337/mcp-update-hijack-demo straight from npm; nothing to host, nothing to sign up for.
How many people use Update Hijack Demo?
The npm package @nottiboy1337/mcp-update-hijack-demo was installed 57 times in the last week. Week over week that is +63%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.