Malware is software that does harmful things. Could be deliberate (viruses, "rm -rf /*"), could be accidental (XSS, #). Browsing without Javascript protects me from both.