to identify this kind of attack, seems you need your antivirus to tell you if TV had been installed without your knowing
(TV can be used in a 2FA login mode too, but that does not help in this case)
Presumambly lastpass, even with 2FA, is itself, compromised, if a TV connection is giving someone visibility of your screen and access to clipboard (like RDP would too)