Nulled theme always have malicious code in them which triggers penalty once you start receiving some trafficyou can also put: name of the theme + nulled
Almost all of them are shared around.
You can use wordfence to decode malicious codes.Nulled theme always have malicious code in them which triggers penalty once you start receiving some traffic