Threat Description
Typosquat of 'django'. The package patches Django's settings loader to disable ALLOWED_HOSTS and CSRF middleware on affected projects, opening the application to host-header attacks and CSRF bypass.
AI Hallucination Analysis
Unlikely AI Hallucination15%
Known to be hallucinated by: n/a (typosquat)
Remediation Guide
- Remove 'djang' from your dependencies immediately.
- Replace with the legitimate package 'django'.
- Verify Django settings (ALLOWED_HOSTS, CSRF middleware) are intact.
- Audit your codebase for imports of the malicious package.
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- HIGH
- Type
- typosquat
- Status
- ACTIVE
- Legitimate Package
- django
- Hallucination Confidence
- 15%
Check My Project
Scan for this package