Your CC company won’t deal with this, it’s a paypal problem.
Contact PP and tell them it’s fraud. They’ll have information about the device etc and will be able to tell it wasn’t yours. However, PP are a bloody nightmare to deal with and you’ll have to press them hard to do something.
Also, change PP password, get 2 factor auth set up and delete your cc details from it until it’s sorted.