WP Sphere redistributing themes with malicious code

And you thought you were safe? Are you using WordPress as your CMS, well if so please read this:

Hidden base64 code redistributed with public WordPress themes opens the backdoor for unsuspecting WordPress users. Highly recommended that WordPress themes not be download from galleries like WP Sphere. Check your WordPress theme source for suspicious code.

The links are inserted via an additional functions.php file which is included with the theme downloads. If you’re shopping around for public themes, I strongly recommend that you download directly from the original authors website.

read more | digg story

You can read more info on the 5thirtyone.com site. They have this to say:

The links are inserted via an additional functions.php file which is included with the theme downloads. If you’re shopping around for public themes, I strongly recommend that you download directly from the original authors website.

I’m so glad I’m beginning to create my own template themes!