malicious content

HI,
Today my server company send me email that :

The following file(s) specifically have been identified as attacker-added malware. We have DISABLED these files by setting their permissions to 200 (Owner write-only). You will need to audit these files and either replace them with known good versions or remove them altogether:

allinallnews.com/wp-content/themes/Newspaper/includes/wp_booster/external/kint/view/js/snake.inc.php

allinallnews.com/wp-content/plugins/custom-login-logo/js/config.funny.php

allinallnews.com/wp-content/plugins/js_composer/assets/lib/prettyphoto/images/prettyPhoto/light_rounded/pine.config.php

I don’t understand that why wordfence did not detect the malicious content?

now I deleted the files but still confused why wordfence did not detect the problem

The page I need help with: [log in to see the link]