Are there any known Python pickle viruses?

Question

I have recently read a post about vulnerability of Python pickle module which allows to execute arbitrary Python code on unpickling: https://intoli.com/blog/dangerous-pickles/ The docs are suggesting to "never unpickle data received from an untrusted or unauthenticated source" but I can think of a hazard coming from supposedly trusted (but compromised) source.

As Python is a flexible, dynamic language it does not require a wizard to create an old-school computer virus infecting pickles.

Are there any known cases of such viruses?

[EDIT]

By "a virus" I mean literally old good "computer virus": a program that proliferates by adding itself to other programs.

Answer 1

If by "virus" you mean "exploit", then you can easily find those even on StackOverflow.

There's probably no widespread malware based on that, partly because there's only little number of applications for popular desktop platforms like Windows that are written in Python, and it's unlikely that any of them indeed uses pickle for the remote data (un-)serialization. However, a Python developer should better avoid a false sense of security here, because it's too simple to write such a malware, as is demonstrated above.