Clear text credentials
Credentials that are stored in clear text in memory or written to log files can be intercepted by a malicious actor.
PASSWORD_HASHERS = [
        # Noncompliant: uses non-standard or insecure password hashers.
        "django.contrib.auth.hashers.MD5PasswordHasher",
        "django.contrib.auth.hashers.PBKDF2PasswordHasher"
    ]
PASSWORD_HASHERS = [
    # Compliant: uses standard and secure hashers.
    'django.contrib.auth.hashers.BCryptSHA256PasswordHasher',
    'django.contrib.auth.hashers.BCryptPasswordHasher',
    'django.contrib.auth.hashers.PBKDF2PasswordHasher',
    'django.contrib.auth.hashers.PBKDF2SHA1PasswordHasher',
    'django.contrib.auth.hashers.Argon2PasswordHasher'
]