PluginBench
MCP Server

io.github.NOTTIBOY137/update-hijack-demo MCP Server

io.github.NOTTIBOY137/update-hijack-demo

What is the io.github.NOTTIBOY137/update-hijack-demo MCP server?

Demo: Server update hijack PoC (clean copy for video)

How to install io.github.NOTTIBOY137/update-hijack-demo

Copy-paste configuration for popular MCP clients.

transport: stdio
Config generated by PluginBench — verify against the source before use.
Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "command": "npx",
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ]
    }
  }
}
Cursor
~/.cursor/mcp.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "command": "npx",
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ]
    }
  }
}
Windsurf
~/.codeium/windsurf/mcp_config.json
{
  "mcpServers": {
    "update-hijack-demo": {
      "command": "npx",
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ]
    }
  }
}
VS Code
.vscode/mcp.json
{
  "servers": {
    "update-hijack-demo": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@nottiboy1337/mcp-update-hijack-demo"
      ]
    }
  }
}
Claude Code
claude mcp add update-hijack-demo -- npx -y @nottiboy1337/mcp-update-hijack-demo

Related MCP servers

PoC: Open Registry supply chain — unvetted server listing (security research)

View repository →

PoC benign MCP server for update-hijack security research

View repository →