Possible false positive — IDP.HELU.PSE94 blocking PowerShell during Cloudflare Wrangler login

Hello,

On October 13, 2026, Avast Behavior Shield displayed “Threat secured” and blocked powershell.exe, reporting IDP.HELU.PSE94 — Command line detection.

This happened while I was attempting to authenticate Cloudflare Wrangler CLI using npx.cmd wrangler login and its device-login option.

I closed the browser authorization page and PowerShell. I have not disabled Avast or restored any quarantined files. I could not find this specific detection in Avast Quarantine or Notifications.

Could someone advise whether this detection is a known false positive and how I can safely verify the situation before retrying the login?

Thank you.