They've been involved with the PostgreSQL Community for at least 2 decades (as have I), so it's super unlikely this is something malicious.
Sometimes the FK links in cells break. Other times views don't get invalidated when pressing refresh until a reboot. There are different refresh buttons all over the place for different contexts. Lots of minor quibbles despite almost weekly updates. It does have a gamut of features though - and it's free and cross-platform though, so it's one of those love-hate relationships for me.
Speaking of supply-chain attacks like the one happened with .XZ compressor - we are taking this matter seriously. I recommend to download PgManage builds from the Github releases page https://github.com/commandprompt/pgmanage/releases Cheers!