cosmic-mcp

All servers

update-hijack-poc

io.github.NOTTIBOY137/update-hijack-poc · version 1.0.1

Community listing. Not installed or verified by cosmic-mcp. Read the source and its permissions before you run it.

PoC benign MCP server for update-hijack security research

https://github.com/NOTTIBOY137/mcp-update-hijack-poc

Quick facts

  • Listing: Community
  • Published Feb 3, 05:55 UTC
  • Transport: stdio
  • Package: npm @nottiboy1337/mcp-update-hijack-poc 1.0.1
  • Listed by cosmic-mcp: Nov 9, 04:25 UTC

Science and research Security

Setup snippets

Generated from the registry entry. cosmic-mcp has not run or reviewed this server; values in angle brackets are yours to fill in.

Run it locally (npm)

npx -y '@nottiboy1337/[email protected]'

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "update-hijack-poc": {
      "args": [
        "-y",
        "@nottiboy1337/[email protected]"
      ],
      "command": "npx"
    }
  }
}

Claude Code

claude mcp add 'update-hijack-poc' -- npx -y '@nottiboy1337/[email protected]'

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "update-hijack-poc": {
      "args": [
        "-y",
        "@nottiboy1337/[email protected]"
      ],
      "command": "npx"
    }
  }
}

VS Code (.vscode/mcp.json)

{
  "servers": {
    "update-hijack-poc": {
      "args": [
        "-y",
        "@nottiboy1337/[email protected]"
      ],
      "command": "npx",
      "type": "stdio"
    }
  }
}

Related servers

  • Ask Gina Verified domain
    Read-only research on tokens, Hyperliquid perps, Polymarket markets and your Ask Gina account.
  • AgentTrust — Identity & Trust for A2A Agents Verified domain
    Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
  • 11agents Cloud MCP
    Cloud MCP for project data, analytics, research, content planning, media generation, and growth.
  • 13FLOW
    Source-linked SEC 13F research, quality checks, watchlists and audit trails for agents.
  • 1Claw Vault
    HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
  • 212medya Growth Check Verified domain
    Audit a public website for B2B marketing readiness and AI search visibility.