Malware Scan – False Positive?

We are getting the following flagged in Wordfence: Are these false positives?

This file may contain malicious executable code: /wp-content/plugins/td-composer/includes/tdc_ajax.php

This file may contain malicious executable code: /wpcontent/themes/Newsmag/includes/wp_booster/td_block.php

This is also on the scan which makes me think we’re probably safe and they’re just trying to sell us services….
“Since you have High Sensitivity scanning enabled, there is a very high likelihood that your results will include false positives. If you think you have indeed been hacked, our team of security experts can help.”

Thanks!

I turned sensitivity setting from High to Standard and it passed just fine.