diff --git a/pkgs/by-name/ba/badsecrets/package.nix b/pkgs/by-name/ba/badsecrets/package.nix
new file mode 100644
index 000000000000..796f5b107d6e
--- /dev/null
+++ b/pkgs/by-name/ba/badsecrets/package.nix
@@ -0,0 +1 @@
+{ python3Packages }: with python3Packages; toPythonApplication badsecrets
diff --git a/pkgs/development/python-modules/badsecrets/default.nix b/pkgs/development/python-modules/badsecrets/default.nix
new file mode 100644
index 000000000000..e0c169e58b0e
--- /dev/null
+++ b/pkgs/development/python-modules/badsecrets/default.nix
@@ -0,0 +1,55 @@
+{
+  lib,
+  buildPythonPackage,
+  colorama,
+  django,
+  fetchFromGitHub,
+  flask-unsign,
+  poetry-core,
+  poetry-dynamic-versioning,
+  pycryptodome,
+  pyjwt,
+  requests,
+  viewstate,
+}:
+
+buildPythonPackage rec {
+  pname = "badsecrets";
+  version = "0.10.35";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "blacklanternsecurity";
+    repo = "badsecrets";
+    tag = "v${version}";
+    hash = "sha256-i80f4qPX695HFdNefIT2sqcKsdMTEiYXUltF2Gj6aAI=";
+  };
+
+  build-system = [
+    poetry-core
+    poetry-dynamic-versioning
+  ];
+
+  dependencies = [
+    colorama
+    django
+    flask-unsign
+    pycryptodome
+    pyjwt
+    requests
+    viewstate
+  ];
+
+  pythonImportsCheck = [ "badsecrets" ];
+
+  meta = {
+    description = "Module for detecting known secrets across many web frameworks";
+    homepage = "https://github.com/blacklanternsecurity/badsecrets";
+    changelog = "https://github.com/blacklanternsecurity/badsecrets/releases/tag/${src.tag}";
+    license = with lib.licenses; [
+      agpl3Only
+      gpl3Only
+    ];
+    maintainers = with lib.maintainers; [ fab ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 753bb2063e84..899ea895c476 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -1631,6 +1631,8 @@ self: super: with self; {
 
   bacpypes = callPackage ../development/python-modules/bacpypes { };
 
+  badsecrets = callPackage ../development/python-modules/badsecrets { };
+
   bagit = callPackage ../development/python-modules/bagit { };
 
   baize = callPackage ../development/python-modules/baize { };