Just when you thought it was safe to download randomly found WordPress themes, we run across a report at OttoPress of a dodgy site called “top-themes.com” that’s offering themes that could turn your WP site into a remote-controlled automated link spamming tool. This might be a good argument to only use trusted theme providers like WordPress.org or Wufoo.
Speaking of security, be sure to update your WP to v3.0.3, (and yep it came out pretty quickly right after v3.0.2).