You say that it's a malicious intent. Are you sure about this? I remember a recruiter once pitched me for a role in a company I did an internship previously - this was when I was student and started to look for my first job. It's possible that he saw that you were an X with n years of experience and sent it to your current company since they were looking for the same profile.

You mention that your current employer knows that you are looking, and that you are not worried about losing your job. In that case I'd just discard him as a crappy headhunter and move on.