I really doubt that I have some kind of malware but I could very well be wrong... could it also be that some of my usernames and passwords where sold or possibly hacked from a websites data base?
I use a lot of the same passwords/usernames for forums I browse etc...
Is that even a thing?
BTW an update on Paxful, since I changed my password I haven't had any problems.
And from looking at the logging on my Paxful account there was some foreign ip that did log in so that is probably what happened?
Most likely the case if you do see some different ip address activity on your account then its definitely one of the reason why you have those indirect transactions on your account.
Good thing that you have changed up your password and just for an advise it is always been suggested on not to use the same passwords on any sites you are engage into.