This really looks not normal.
Look at this thread: RPi 1 PRIVNUT1 process - #21 by Smurphy
It rather looks like you got yourself a Malware.
Having files like sshd, ntpd etc. downloaded, especially a telnet program?
Especially the cd /tmp || /var/run … it looks for a location to put the files in.
My Advice is to actually:
- Wipe your OS drive clean and re-install from scration
- change the osmc user default password
- Apply all updates: apt update && apt dist-ugprade
- Make sure this device is not accessible from the outside.
Then you should be Ok.