Hello,
Our theme does not include any malware code by default! You can download original files from themeforest and check. If your antivirus found any malware code then probably your site was hacked. We would also recommend you to contact your hosting provider to scan whole the WP installation, maybe DB to remove the injections and protect your site for the future.
Regards