'mkdir .dist' keeps randomly appearing in bash history

Question

Short question, but I can't find the answer anywhere. Why is mkdir .dist randomly appearing in my Bash history all of a sudden? I haven't been typing it and it's a bit annoying to scroll past when trying to find previous commands. I'm on Pop_OS! if that helps.
Edit: it seems to "inject" the command into history.
e.g. 7PM I can scroll up and see my commands python test.py, etc.
Then at say 8pm I'll see: python test.py, mkdir .dist, etc.
Could a program cause this or is this an OS thing?

Gerard H. Pille · Answer

Someone or something is connecting to your account and executing a bash shell with that command.
Add something like this to you bash profile (after taking a backup of it):
(date; who -a; ps -ef) >> /tmp/bash_logon.txt

Do NOT log out when you've done that, try a new logon first to see if you still can.   Remove that line when you've seen enough.

'mkdir .dist' keeps randomly appearing in bash history

One Answer

Add your own answers!

Ask a Question