Impost3r – A Sudo Password Thief (github.com)

I could see something like this being packaged with a less than reputable driver source. Many users will just run an install script, they maybe watch the text scroll past but have no idea what is going on, then bingo they are r00ted without even knowing it. Especially if the device they are trying to install actually works post script. I can think of a few usb devices on Amzn that would make easy targets.