That's my thoughts. In all likelihood they'll contact you first with something threatening.
If that worries you, remove said product/template/script when you get that email and apologise for this misunderstanding, assuming they've proved it's theirs first of course!
I'm lucky in that most things are from the US and i'm in the UK, so if anything ever does get said, legal proceedings would cost an arm and a leg and would take a very long time!