There are a few places where virtualenv creates temporary directories, but they never get cleaned up. This come up when Debian was discussing CVE-2011-4617.
This is Debian bug #661272.
Cleanup temporary directory created with mkdtemp()
Poke. It's been a month, and Debian are waiting on this.