Either they have your password, or they used your address as their fake return address. Change your password to stop the first. I don’t think you can do much about the second.
Unfortunately the second is probably a lot more likely. I think the most likely scenario is that the email address was harvested off of someone's machine you've sent email to from that address by some kind of malware. You're probably going to have to abandon that address.