If we create a script 1:
#!/bin/sh
echo "I'm doing something secure"
And then script 2: #!/bin/sh
echo "I'm doing something insecure".
sudo echo "I'm doing something malicious".
Then run: $ sudo ./script1.sh; ./script2.sh
Looks like Firefox has access to your banking user :)