hello - while i was at work i noticed strange activity in my email inbox from steam, receiving emails from them at a legitimate looking address telling me i had gifted other users awards 38 times. when i get home i check and see i have not given these awards out according to my /awards url on my profile page.
also, my profile picture and profile background had been changed, but it was to a profile animation in the points workshop that were purchased within a span of 3 minutes when ii wasn't home
my recent login history looks suspicious with multiple logins from places i don't have active computers at, i reset my gmail password, steam password, removed+locked my card for the time being, and changed my linked paypal account password.

does anyone know what to think? https://imgur.com/a/0kt0wKE