Firewall issue - arduino software detected as malware

Make a backup of package_index.json, then open the file in a text editor. Find all the

http://downloads.arduino occurrences and change those to
https://downloads.arduino

If it doesn't work out as expected, copy back the backup file