I'm starting to wonder what "normal" is @Julianm64 but I can tell you that occasionally WordPress core files are modified. One example I can think of core files being modified would be WordPress upgrades. Sucuri would detect core file modifications if you were to go from go from WordPress 5.1 to 5.1.1 (as an example).
That said you should pay attention to all of those dashboard notifications (good job on you) and understand what they mean. I can't specifically tell you what your notifications mean but I urge you to stay vigilant. I hope that helps?
...turns out that my two cents is worth less or more depending on the current exchange rate.roy darling *my posts seem a lot shorter in my head
