Security News Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data TheHackerNews Daniel Bender Apr 5, 2025 Researchers found Disgrasya downloaded 37,217 times, targeting WooCommerce with carding scripts that steal payment data.