EDIT
I can confirm, I downloaded a bad version of Runelite.
Nothing worse then logging into your osrs account and getting that error that its already logged in. Changed the password and logged in and my account was cleaned out.....
How does this happen? Password was not used on other accounts, My pc is clean... Took a dive into google about leaked databases from runescape?
Anyone have idea? Or has it happened to others?