claude-tui

No clear evidence of intentional malware in this fragment (no exfiltration, persistence, or obfuscated payloads). However, the code has a significant security risk: it constructs a shell-like command string for tmux new-session using untrusted data (cwd from JSONL session files and session_id from CLI/env or filenames) without quoting/escaping, creating potential command-injection/sabotage conditions. Additionally, it injects arbitrary user-provided commands into an interactive agent via tmux keystrokes, and it prints captured pane output which may expose sensitive information to console/logs. Treat this as a high-impact automation tool when inputs or session files might be attacker-influenced.