Is Javascript even helpful to most malwares?
Yes, very much so. Adobe PDF reader's JavaScript ability is the reason it's dangerous to open PDF files anymore. They issue a new patch once a month it seems and are working on a sandbox as the problem cannot be contained. Without JavaScript embedded in the PDF files, this would be a much more manageable issue.
Anyway, malwares would have spread through downloaded executables (e-mail attachments, etc). Is Javascript even helpful to most malwares?