Need help with these alerts

Here is an explanation for each file:

.DS_Store

In the Apple macOS operating system, “.DS_Store” is a file that stores custom attributes of its containing folder, such as the position of icons or the choice of a background image. The name is an abbreviation of Desktop Services Store, reflecting its purpose. It is created and maintained by the Finder application in every folder, and has functions similar to the file desktop.ini in Microsoft Windows. Starting with a full stop (period) character, it is hidden in Finder and many Unix utilities. Its internal structure is proprietary.

More info: https://en.wikipedia.org/wiki/.DS_Store

default.html

This file is the default page that many hosting providers use to show that your server has been successfully configured. It is commonly known as a replacement for “index.html” which many web developers replace with their own code when they publish their own websites.

wp-admin/error_log

This is file is used to store a copy of all the error messages triggered by a malfunctioning PHP script. The directory where the file is located hints to the location of the script with errors, in this case, it seems that the problem is withing the WordPress administration dashboard, probably with one of your plugins.

More info: https://php.net/manual/en/function.error-log.php

wp-includes/.DS_Store

Same as the explanation in the first paragraph.

—

You can safely delete these files, but they will surely appear again because:

1. Someone with a Mac computer is uploading files to your website, or used to and now the “.DS_Store” files are left there for no reason. If, whoever has a Mac computer, is going to keep accessing these directories, then the files will be created again.
2. “error_log” will be re-generated until you fix the errors in the PHP script that is triggering the warnings and/or failures in the code. Open that file with a text editor to read the errors that the PHP Interpreter is reporting.
3. “default.html” may or may not be re-generated, it depends on what your hosting provider is doing. Some hosting providers keep some canary files on each customer’s account to keep track of certain information that’s unknown to us. Talk with one of their support agents to know more.

Let me know if you need more information.

Typically these files are not a problem, but it’s impossible to tell for sure without examining the content. If you decide to trust these files, then you can “mark them as fixed” in the Core Integrity section in the plugin to ignore them in future checks.