I'm endorsing Lou's thought that it is probably just your turn to have your address spoofed in a spam run. Depending on your ISP (and his inwards server filtering), there could be thousands more NDRs that you're not even seeing. Of the ones that are returned, they should all be showing the messages you supposedly sent as actually originating from different IP addresses if it's just email address spoofing. If, instead, it actually was a trojan on your computer sending direct to the internet, they would all be from the one IP address - yours. That would probably be the one you see when you visit
show my IP. So, it's fairly easy to reassure yourself you're not 'leaking' spam. One hopes.
You can report misdirected bounces, just like you would spam. A slightly different report goes to the admins responsible, inviting them to mend their ways. Messages should never be returned to the email address shown in spam because it is almost always spoofed. They are incompetent if they don't know that and are in urgent need of education. They will get themselves onto blacklists if any of the addresses they bounce to are actually spamtraps.