About malware: I also use a Firefox addon to download YouTube videos. It's called 'Download YouTube Videos as MP4' - but there are several similar addons. You can be pretty sure that a Firefox addon will be safe - especially since Mozilla introduced mandatory reviewing and 'signing' of addons in version 43.

If you capture the sound from Firefox, as Will does, you don't need any sort of downloader or addon.