django-nopassword prior to 5.0.0 stores cleartext secrets in the database.
django-nopassword project django-nopassword