First of all, you probably shouldn't post what the pass was or was close to. And Secondly, you don't get hacked spontaneously. You had to have clicked a link, downloaded a file, etc. There's so many fraud streams and emails that target Runescape.
https://www.avast.com/en-us/index
https://www.malwarebytes.com