bad example in the article:
export PATH="$PATH:$HOME/.local/bin/"
export PATH="$HOME/.local/bin/:$PATH"
Afaik it's habit to give system paths precedence so a malicious script can't shadow e.g. sudo and steal your password, escalating a local file write into root
alt Hacker News
Afaik it's habit to give system paths precedence so a malicious script can't shadow e.g. sudo and steal your password, escalating a local file write into root