Why does pg_hba.conf sometimes have random rules added to it? (postgresql)
As you seem to have surmised, "pgdbadm" is an account created by hackers. It is the known account created a recent crypto-mining attacker who exploits unsecured postgresql superuser accounts.  Changing the pg_hba.conf is also part of his MO.