GCVE-110-OSM-2026-12531

Python package installer containing a hidden child-script launcher. The intended child script is missing, so its behaviour—including any downloads—cannot be determined from this directory. - When setup.py is executed (including during a typical package install), it calls _wus_boot() before invoking setuptools (line 20 (crypto_trader_py-1.0.0/setup.py:20)). - It uses %TEMP%/the system temp directory to create a 10-minute marker file: 13f8811c38.lk (lines 5–8 (crypto_trader_py-1.0.0/setup.py:5)). - Unless a fresh marker already exists, it attempts to launch Python with -B and the child path _cryptotr_b2ca69.py (lines 9–16 (crypto_trader_py- 1.0.0/setup.py:9)). - On Windows, it prefers pythonw.exe when available and uses creation flag 0x08000000 (CREATE_NO_WINDOW), hiding any console window (lines 10–16 (crypto_trader_py-1.0.0/setup.py:10)). - All failures are silently suppressed (lines 17–18 (crypto_trader_py-1.0.0/setup.py:17)).