Check the files .ash_history and /root/ash_history

Some weird speculation for you to rethink about:
Sometimes a copy and paste in the wrong application, like X-Terminal application, might happen... did it may be?

Another possibility might be related to that yappari application, being related to the smartcrash app for apple products