[spicybright]

That's a spooky one, although I've never heard of that happening in practice before.

But then again how, how someone know if that happened!

[moistbar]

They'd have to know to look for it, but running `alias sudo` would show if it had an alias assigned to it. It would honestly be more effective to change $PATH to include the malicious version of sudo.