Yup, it looks bad.
Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures
https://ww.wp.xz.cn/support/article/faq-my-site-was-hacked/
https://ww.wp.xz.cn/support/article/hardening-wordpress/
If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.
I would first check their server and see if there is a backup you can roll back to before the “hack”