Thats not right , as Virustotal scans not really all things deep , and we have seen in the past that there Malware downloads in it without detected on Virustotal .
Hackers already have found a way or ways to get around this detections.
Dont trust all things that you see on the first time , but its up to everyone self what they doing , its just a reminder here from my side.