Package urls replaced by 2tvenom/cborencode

Question

I am working on an upgrade from Magento 2.3 to 2.4.3-p2. After a recent composer update of an extension a lot of repository URLs were replaced with random entries like the below.

`codeload.github.com/2tvenom/CBOREncode/legacy.zip/f846724ad842916061127d20da4fe4e129f7d4b8`

Anybody has any idea why this is happening? I have tried several options from the github issue, but nothing seems to work for me https://github.com/magento/magento2/issues/34325

Answer 1

For me the fix was to replace magento/module-two-factor-auth in the composer .json