Eddie is built on Mono, so Mono libraries are necessary. Now the question is whether you looked at Eddie Portable or the installed one, because only the portable one ships those .so files itself. The installed one uses the system ones provided by differently named packages. That "suspicious" libmonoposixhelper.so is in mono-runtime-common in Ubuntu, for example.
For the links you posted, snapcraft.io is the homepage for Canonical's container format, Snap, and Cairo is a rendering API. That excessively long domain exceeds the maximum domain name length, some of the domains are nonexistent, and data.rel.ro is not a domain but probably references Relocation Read-Only, or relro for short, a security thing used in linkers like GNU ld, falsely labeled a domain, as there is a section in the binary file created by it called .data.rel.ro.
In my eyes, if you downloaded Ubuntu from ubuntu.com, you get your package updates from archive.ubuntu.com and you downloaded Eddie from eddie.website, there is zero chance you're dealing with some intrusion or other. More likely, that Hybrid Analysis toolkit is massively spooking you…