Somebody is hacking into your system and commandeering it to run something resource-intensive, possibly a bitcoin miner. Whatever it is, it's trying to obscure its process name which is hardly a sign of good intentions.
I'd counsel taking a hard look at your pg_hba.conf to be sure it's not allowing non-credentialed logins from anywhere. And for pete's sake don't use a guessable password.