A Python wheel is a built distribution format for Python software, usually stored as a .whl file. It can contain ready-to-install code and metadata, and may include compiled components for particular operating systems or Python versions. Installing a compatible wheel is often faster than building a package from source.
Wheels matter in cybersecurity because they are artifacts users install and run, not merely descriptions of source code. A compromised build or release process can place malicious code in a wheel even when the corresponding source appears clean. Defenders can reduce risk by pinning package versions, checking artifact hashes and build provenance, and sourcing packages from trusted repositories. In an incident, identify where the wheel was installed and consider rotating secrets accessible to that environment.