Encyclopedia
PyPI⚠ HIGHslopsquat⚠ ACTIVE THREAT
django-rest-fast
First seen: May 11, 2026 0 viewsMimics: djangorestframework
Threat Description
A hallucinated 'fast serializer' companion to Django REST Framework. Models suggest it as a drop-in speed-up for DRF serializers, but it is not a real PyPI project. Registered copies ship a credential stealer that activates only when Django's DEBUG setting is False, making it hard to spot in development.
AI Hallucination Analysis
Very Likely AI Hallucination84%
Known to be hallucinated by: GPT-4, Claude 3, Copilot
Remediation Guide
- Remove django-rest-fast; use drf-spectacular or optimize serializers manually. 2. Audit settings.py for unexpected imports. 3. Rotate database and secret-key credentials. 4. Run your test suite with DEBUG=False to surface hidden payloads.
Related Horror Stories
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- HIGH
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- djangorestframework
- Hallucination Confidence
- 84%
Check My Project
Scan for this package