Lots of unknown files in WordPress core

My site seems infected, Defender scan reported a lot of “Unknown file in WordPress core” and they seem to contain malicious code