Well after talking with support they told me to replicate what I did and record it, nothing happened this time, I also successfully bought and sent BTC again without this "malware" problem happening, its weird I am very careful what I look at on the web and links etc, I am very impressed if this is actually some kind of malware.
Wouldn't hurt to run some scans though, would it?
I don't really see what else it could be, other than a sloppy copy paste (which you already ruled out.)
Perhaps the malware only triggers on site X, for balance greater than y. I don't know.
but then after pressing send I noticed in the transaction description that it was sent to a totally different address... (1KsHQa735fPjZuYBeM713eHo7rGC3wAVuB),
You mean when you are about to make the transaction, and they ask you to look over the transaction once more because;
"All bitcoin transactions are final! Please double check receiver's bitcoin address before sending"
Or after you already made the transaction?
If it was before, i doubt Paxful made a mistake.
However, if it was after the fact, there might be a rare possibility that Paxful could've done something wrong? (Although i really doubt it.)