Hi @jodiegriffiths,
I see it too, it seems to be malware similar to this one tricking visitors to allow notifications in their browser rather than actually performing a genuine bot/human verification.
The link above may still help you out, but we do have our own site cleaning process and other instructions to assist you should you need to clean the site thoroughly yourself:
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
As a rule, any time I think someone’s site has been compromised I also tell them to update their passwords for their hosting control panel, FTP, WordPress admin users, and database. Make sure to do this.
Additionally you might find the WordPress Malware Removal section in our free Learning Center helpful if you haven’t explored it already.
If you are unable to clean the site on your own there are paid services that will do it for you.?Wordfence offers one, and there are others.?Regardless of whether you choose to clean it yourself or let someone else do it, we recommend that you make a full backup of the site beforehand.
I hope this helps you out!
Peter.