As it was not posted here by "bitcoincandy" account, it might just be one of those trojans/scams that we were all warned about.
Not sure, if by now I'd even trust a software by the real candyists, though.
on this site posted www.bitcoincandy.one
and he in turn is listed on the viabtc

You're right... I stand corrected - the github-links indeed seem to be official.
I don't quite understand the "viabtc" reference, though...