There are malware scans on the server side, many games are looked at by itch.io staff, and if you find one that looks suspect, you can report it.