> Where do these books come from in the first place? Have publishers systems been leaked/hacked?

Most of zlib is libgen, and I think libgen relies on user uploads and sourcing from their forums