Trojan inside Wordpress theme downloaded from Elemeelements

Envato Customers Web and Code
1

I got an alert on my antivirus using the Luxury Spa theme, a trojan found, this was the message:

We blocked this dangerous page for your protection:
https://wordpress-258137-2053556.cloudwaysapps.com/wp-content/themes/luxury-spa/js/smooth-sticky.min.js?ver=1.0.2
Threat name: JS:Trojan.Cryxos.6484
Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

image
image714×230 7.62 KB

Did not find a way to report the theme, so not sure what to do.

2

Hi,

for security don’t open the theme file – instead, head over to virustotal.com and upload the zip file. They will scan it against all the top antiviruses and you can determine if it’s a false positive or not. if it is infected, delete the zip file and send the virustotal results to envato support by opening Envato Elements Help ticket .

Thanks