There was a prior issue on pip where running the pip install command against a wheel could cause arbitrary code execution: #13079 However while that specific issue was fixed it was not addressed if ...

Pipenv is a Python virtualenv management tool that supports a multitude of systems and nicely bridges the gaps between pip, python (using system python, pyenv or asdf) and virtualenv. Linux, macOS, ...