I just have a doubt right now about the possibiliy that this attack was using passwords from past breaches (which is what LastPass is saying)
It's also entirely possible this is all is due to an entirely new vulnerability which hackers have uncovevered which the security community has not recognized yet. This is less likely, but whether it is the case or not doesn't change the fact this likes like a higher than average incident rate for indivual compromises, rather than a larger single event.
It was just weeks ago some very popular package on NPM was found to collect credentials.
Again, not saying that's what happened but theoretically your computer was breached with some malware which collected credentials. I just meant it "makes sense" from a technical point of view. The likelyhood of this being the issue I am more unsure about.
I'm not actually following what does not make sense.