What plugin reports that? Wordfence?

Security by CleanTalk

Any other detail of what the infection could be?

Could you manually check/view that file to see what is inside?

I am not very techy but I navigated to the thread(s) to look for anything "off" and I don't see anything.  Meaning, all attachments look fine.

There are 128 instances.