Strava

From the looks of it, it's an entirely separate account (*) that has been created with a similar name, the idea is that your friends will think it might be you and click on the link (which will be chock full of malware).

For them to be in your stream would mean (I think) you might be following them, you might want to review your friend list.

* It could be one of your friends that has had their account infiltrated which is why you, and other people you know, are seeing it in your stream. Odd tactic though, never seen that before. If it is a friend's account you might be able to work out who it is from old rides (unless they've been

I doubt that changing your password and reviewing your linked apps will help (although it's always worth doing this) as it doesn't look like your account that's doing this. Might be worth trying to take it up with Strava as it's likely the account can be squished on the grounds that it is linking to malware.