Pickles is commonly used in Python to convert objects and classes in human-readable code into a byte stream ... [to] have malicious effects when you unpickle them. As a result, you should never ...

Similarly, the Python documentation for Pickle has a big red warning: “It is possible to construct malicious pickle data which will execute arbitrary code during unpickling. Never unpickle data ...