CARDING TOOL ABUSING WOOCOMMERCE API DOWNLOADED 34K TIMES

Summary from the TLDR InfoSec newsletter

Researchers from Socket have discovered a malicious PyPi package called disgrasya. The tool abuses legitimate WooCommerce sites to validate cards using an attacker-controlled site masquerading as CyberSource. This package is particularly notable in that it does not abuse typosquatting or any other evasion technique but is instead overtly malicious.