There are backdoor for SMTP credentials in django projects: https://searchcode.com/?q=EMAIL_HOST_PASSWORD%3D&p=1&loc=0&l...