Alright so some of the findings of the scan is actually a false positive specific to the group of files under the git repo clone on my local from the AI Engineering course.

The rest came from KMSPico tool used by the seller of this machine to me where Windows 10 Pro is already bundled. Looks like the KMSpico they have is compromised.

Malwarebytes Free has removed the threats.