Hacker News Reader

Python venvs are not intended to provide isolation from the host system and therefore do not provide any isolation from the host system.

So yes, the app can certainly harm the OS, and the venv would not provide any protection against this.

I don't have concerns, because I won't be running this code

I'm legitimately wondering what you recommend from among those options.

This is absolutely not true. In fact, considering the deception of this post, if the person making this post is associated with the project then the project should be considered malware.