Hmm which seems to be tied in with the "fake" keyboard.
(L)eripc.c:217,erIpcStartClient() Sending messages to 127.0.0.1
sending to fakekey: l
sending to fakekey: s
This came from launching rxvt with the mb-applet-xterm-wrapper.sh and then pressing on the keyboard button and entering "ls" enter.