email - SMTP specifically - is just fundamentally insecure, unfortunately. The "from" field can be absolutely anything the sender wishes.
Spammers can simply insert the recipient email address as the sender, which is what you have seen.
The good news is that it doesn't necessarily mean that your email account has been compromised - the bad news is that your address has obviously got onto a spam list, but then most email addresses do!
SD