u/SerotoninKite

Hello. This is the first time I post on reddit because I'm so confused. Someone keeps logging in to my steam from different parts of the world (clearly a VPN) but what puzzles me is that steam recognizes the logins being from my own PC. The login times also say they are from times I'm online already playing a game or the PC is straight up turned off. If it was a RAT this could not be the case, right? But why would steam recognize it being my own PC logging in? Help?

Also I did have not logged in with my steam info on any place that is not steam's client so I doubt they got my token, but even then, would steam recognize that as my own PC?