Here is a useful WordPress plug in for alerting you to suspect code in theme files. It’s from builtBackwards. If you’re like me I go exploring and download lots of interesting themes. Most times I don’t have time to examine the files minutely. So, this plug in is really helpful for scanning all the files in a theme.
TAC (Theme Authenticity Checker)