A combolist (Compilation of Multiple Breaches) is a large database of stolen usernames or email addresses paired with passwords.
Usually distributed as a plain text or .rar archive, they are formatted (often as email:password ) to be easily read by automated hacking tools.
They are not from a single leak but are compiled from multiple historical data breaches over several years.