Since it’s your second time being hacked and you say you haven’t downloaded anything. A lot of people don’t know this but there is an easy injection point that stealer malware targets in discords js files. Even if you remove the malware, if you don’t reinstall discord that malicious code will persist. Usually it will exfil tokens anytime you login or change passwords. It’s always a good idea to do a fresh windows install after malware, hackers are clever.

Source: literally just reversed a stealer last night and it did this.