On the repository’s “Releases” page, you will find a list of assets for each version. Look for a file named something like:

If you have a specific legitimate software name in mind (perhaps misspelled), please clarify, and I can help you find the official download source. Otherwise, I strongly advise avoiding unverified .dmg files from third-party websites.