in /tmp i see mc-onofmyuserslogin folder

Can anyone explain it to me how he appeard there? i do not sell shell accounts... some hack attempt? but how?

the same user in /tmp has also /pdk directory where are many files like this 54ba75s62785ff36g2c34gs56d2t34.so