A vulnerability in setuptools on Windows allows an attacker to craft a wheel with a malicious .dist-info/namespace_packages.txt file that causes setuptools' legacy wheel installation to create an __init__.py file outside the intended installation directory. This occurs because the namespace package path can be interpreted as an absolute Windows path, bypassing expected directory constraints. The created __init__.py file contains fixed content and is created with the permissions of the installing process. The attack requires the target parent directory to already exist.