Socket<p>The Socket Research Team discovered a malicious <a href="https://fosstodon.org/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Python</span></a> package that enables automated credit card fraud on <a href="https://fosstodon.org/tags/WooCommerce" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>WooCommerce</span></a> stores by abusing checkout and payment flows. </p><p><a href="https://socket.dev/blog/malicious-pypi-package-targets-woocommerce-stores-with-automated-carding-attacks" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">socket.dev/blog/malicious-pypi</span><span class="invisible">-package-targets-woocommerce-stores-with-automated-carding-attacks</span></a></p>