If it already happened

Move whatever is left to a fresh wallet created on a clean device — revoking approvals is not enough if the key itself leaked. Then revoke the approvals anyway, record the transaction hashes, and report the address publicly so others can be warned. On-chain transfers cannot be reversed, so speed matters more than certainty.