mcpbeat Sign in

Update Hijack Demo MCP Server

local only

Update Hijack Demo runs on your own machine — the client starts it, so there is no endpoint to ping. 55 installs a week from npm.

Demo: Server update hijack PoC (clean copy for video)

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 14 · avg 4 · +34% w/w
a month agotoday
55
Installs / week
npm · @nottiboy1337/mcp-update-hijack-demo
—
Stars
on GitHub
—
Last commit
no releases in 90 days
—
License
language unknown

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add update-hijack-demo -- npx -y @nottiboy1337/mcp-update-hijack-demo
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "command": "npx",
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.update-hijack-demo]
command = "npx"
args = ["-y", "@nottiboy1337/mcp-update-hijack-demo"]
.cursor/mcp.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "command": "npx",
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "update-hijack-demo": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ]
    }
  }
}

Alternatives to Update Hijack Demo

same job, measured the same way
Update Hijack Poc
by nottiboy137

PoC benign MCP server for update-hijack security research

25 installs/wk local only
Testing Repo
by vinur1992

An MCP server that created for demo

local only
Enhance MCP
by avclabs

HTTP MCP Client-Server for video enhancement API

179 installs/wk local only
MCP Wan
by acedatacloud

MCP server for Wan AI video generation

1 593 installs/wk answering
Seedance Polza MCP Server
by ivanantigravity-lgtm

Seedance video generation MCP server for Polza.ai.

128 installs/wk local only
Snapcall
by snapcall

MCP Server that generate video call url

answering
MCP Kling
by acedatacloud

MCP server for Kling AI video generation

2 484 installs/wk answering
Facetimemcp
by aernouddekker

MCP server for macOS FaceTime — initiate phone, FaceTime audio, and FaceTime video calls

37 installs/wk local only

Update Hijack Demo — questions

Answers built from our own checks of this server.

Why is there no uptime for Update Hijack Demo?
Update Hijack Demo runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @nottiboy1337/mcp-update-hijack-demo was installed 55 times last week.
Is Update Hijack Demo still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect Update Hijack Demo?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @nottiboy1337/mcp-update-hijack-demo straight from npm; nothing to host, nothing to sign up for.
How many people use Update Hijack Demo?
The npm package @nottiboy1337/mcp-update-hijack-demo was installed 55 times in the last week. Week over week that is +34%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.