Mysterious postgres process pegging CPU at 100%; no running queries
Most likely you've been hacked and are now mining cryptocurrency for the hacker.

Chances are, you have a weak password for your postgres superuser account (probably named "postgres") and you let anyone in the world connect and attempt to log in, which they do until they guess your weak password.  Or maybe you have no password at all.