Encyclopedia
PyPI☠ CRITICALslopsquat⚠ ACTIVE THREAT
django-rest-fast
First seen: Oct 7, 2026 0 viewsMimics: djangorestframework
Threat Description
A hallucinated 'fast' REST framework layer for Django. AI assistants recommend it as a performance-optimized DRF replacement. No legitimate package by this name exists. Registered versions patch the request dispatch to copy every request body and Authorization header to an attacker relay before the view runs.
AI Hallucination Analysis
Very Likely AI Hallucination88%
Known to be hallucinated by: GPT-4, Claude 3 Opus, Copilot
Remediation Guide
- Remove django-rest-fast and use djangorestframework. 2. Treat every request body and auth header during exposure as leaked. 3. Rotate API credentials. 4. Pin DRF by hash and add the package to your blocklist.
Related Horror Stories
Quick Facts
- Ecosystem
- PyPI
- Risk Level
- CRITICAL
- Type
- slopsquat
- Status
- ACTIVE
- Legitimate Package
- djangorestframework
- Hallucination Confidence
- 88%
Check My Project
Scan for this package