It's just a programming language. Non-malicious people find it convenient for writing programs. Especially ones that need a GUI that fits the HTML model.
Your problem is, I think, that it's a programming language that can be delivered into your browser over HTTP. That doesn't happen spontaneously, of course, you do actually have to invite it in.