Trojan inside Wordpress theme downloaded from Elemeelements

I got an alert on my antivirus using the Luxury Spa theme, a trojan found, this was the message:

We blocked this dangerous page for your protection:
Threat name: JS:Trojan.Cryxos.6484
Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

Did not find a way to report the theme, so not sure what to do.


for security don’t open the theme file – instead, head over to and upload the zip file. They will scan it against all the top antiviruses and you can determine if it’s a false positive or not. if it is infected, delete the zip file and send the virustotal results to envato support by opening Envato Elements Help ticket .