1/2 Not sure, you will have to look back to which services your wallet is connected to or your privkey has actually been leaked.
Just searched for the destination address, it started execution
7 days ago from some address and converted all tokens received to BNB then ended up at this address 0xece7c787d10faced59395a34965, before 106+ BNB was added to
LP. My assumption is that you are connected to an exchanger (DEX) exploiting addresses via smartcontract permissions and draining BNB and high value tokens in dollar.
2/2 As I explained above, I don't think this has anything to do with a token contract (TSA) because it involves a lot of tokens. They won't know about this.