[stevekemp]

Go to the "insights" tab on your repository, and you should be able to see the number of recent-clones. If that number is bigger than zero it might be that somebody else has fetched it.

But really we can't tell; there's been nothing in the news about a mass compromise, or mass leaking. So it is possible you've had a PC compromise by a slow & stealthy user, or something entirely different.