There was a prior issue on pip where running the pip install command against a wheel could cause arbitrary code execution: #13079 However while that specific issue was fixed it was not addressed if ...