Search the active theme files for signs that may indicate that it has fallen victim to malicious hackers. Or use this plugin as a tool to verify the integrity of the installed theme.