Wordpress malware - https://redpenguinclasses.com/

My server - Siteground - informed me that there was malware. They gave me some file names - I removed them - but then more appeared.
The files they mentioned are:
01/07/2023 22:58:14 - /home/u560-8aejw35xfu5q/www/redpenguinclasses.com/public_html/wp-content/plugins/core-stab/index.php
01/07/2023 22:58:14 - /home/u560-8aejw35xfu5q/www/redpenguinclasses.com/public_html/wp-content/themes/twentynineteen/404.php
01/07/2023 22:58:14 - /home/u560-8aejw35xfu5q/www/redpenguinclasses.com/public_html/wp-content/themes/classic/inc/index.php

but I would presume that there may be more.