I purchased a theme from themeforest and noticed that there were some hardcoded images that were hosted on a domain that my antivirus and malwarebytes flagged. I contacted the author of the theme and he wanted direct access to my site. I then used a vanilla install on a vagrant box to make sure there wasn’t a conflict with any plugins that might have caused an error. The issue persisted. The images were hardcoded and the test posts linked to that same domain’s wp-admin page.
I can supply the theme name and link (as well as the test Vagrantfile) if you wish. I didn’t see any form to request a theme re-review, so I thought I’d start here.