I really doubt that I have some kind of malware but I could very well be wrong... could it also be that some of my usernames and passwords where sold or possibly hacked from a websites data base?

I use a lot of the same passwords/usernames for forums I browse etc...

Is that even a thing?

BTW an update on Paxful, since I changed my password I haven't had any problems.

And from looking at the logging on my Paxful account there was some foreign ip that did log in so that is probably what happened?