Security News > 2025 > April > Carding tool abusing WooCommerce API downloaded 34K times on PyPI
2025-04-06 14:17
A newly discovered malicious PyPi package named 'disgrasya' that abuses legitimate WooCommerce stores for validating stolen credit cards has been downloaded over 34,000 times from the open-source package platform. [...]