I was rather shocked recently when I run the virus scanner on my laptop to find that one of several threats discovered was from a Wordpress theme folder I recently downloaded.
I won’t name the template, suffice to say it not all templates out there are safe. It’s better to scan them before uploading to your server because you don’t to upload some sinister scripts on your server.
Link to this page