[yencabulator]

You don't need a "compromised app" if the escape codes are in a file you cat.