
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@heroku-cli/plugin-2fa
Advanced tools
CLI Plugin for 2FA protected apps.
$ heroku plugins:install @heroku-cli/heroku-2fa
$ npm install -g @heroku-cli/plugin-2fa
$ heroku COMMAND
running command...
$ heroku (--version)
@heroku-cli/plugin-2fa/2.0.0 darwin-x64 node-v20.18.3
$ heroku --help [COMMAND]
USAGE
$ heroku COMMAND
...
Follow the Developing CLI Plugins guide.
heroku 2fa:preauthheroku 2fa:preauth:clearheroku 2fa:yubikeysheroku 2fa:yubikeys:addheroku 2fa:yubikeys:remove IDheroku 2fa:preauthadd a pre-authorization to perform actions on a paranoid app without two-factor authentication
USAGE
$ heroku 2fa:preauth -a <value> [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
DESCRIPTION
add a pre-authorization to perform actions on a paranoid app without two-factor authentication
See code: src/commands/2fa/preauth/index.ts
heroku 2fa:preauth:clearremove a pre-authorization to perform actions on a paranoid app without two-factor authentication
USAGE
$ heroku 2fa:preauth:clear -a <value> [-r <value>]
FLAGS
-a, --app=<value> (required) app to run command against
-r, --remote=<value> git remote of app to use
DESCRIPTION
remove a pre-authorization to perform actions on a paranoid app without two-factor authentication
See code: src/commands/2fa/preauth/clear.ts
heroku 2fa:yubikeyslist yubikeys for this account
USAGE
$ heroku 2fa:yubikeys
DESCRIPTION
list yubikeys for this account
See code: src/commands/2fa/yubikeys/index.ts
heroku 2fa:yubikeys:addadd a yubikey to this account
USAGE
$ heroku 2fa:yubikeys:add
DESCRIPTION
add a yubikey to this account
You will be prompted to press it.
See code: src/commands/2fa/yubikeys/add.ts
heroku 2fa:yubikeys:remove IDremove a yubikey from this account
USAGE
$ heroku 2fa:yubikeys:remove ID
ARGUMENTS
ID id of the Yubikey to remove
DESCRIPTION
remove a yubikey from this account
See code: src/commands/2fa/yubikeys/remove.ts
FAQs
Heroku 2FA commands
We found that @heroku-cli/plugin-2fa demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 54 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.