The win kept alive Sri Lanka's hopes of winning the five-match series after Australia won the previous two.
After being asked to bat first, Sri Lanka made 286-9 in 50 overs with Tharanga top scoring with 111. He hit 12 boundaries in his 139-ball knock, his 12th century in one-dayers and fourth this year.
In reply, Australia was dismissed for 208 runs in the 45th over. Mike Hussey top-scored for the visitors with 63 runs. Malinga returned best bowling figures of 5-28 for Sri Lanka.
Malinga struck early in Sri Lanka's defense having in-form batsman Shane Watson caught at slip by Mahela Jayawardene for five runs, with the total on six.
Debutant seam bowler Shaminda Eranga bowled Brad Haddin for his maiden international wicket and later got the prize wicket of Ricky Ponting, who was caught and bowled to leave Australia struggling at 52-3.
Captain Michael Clarke and Mike Hussey fought back with a 71-run partnership for the fourth wicket but Malinga dismissed Clarke for 46.
Hussey and Steven Smith showed signs of recovery with a combined 45 runs for the sixth wicket before Smith was run out by a brilliant throw from bowler Nuwan Kulasekara on his follow through.
Hussey's dismissal for 63, caught by substitute fielder Suraj Randiv off Malinga, ended Australia's hopes. Hussey faced 77 balls and hit five boundaries.
Eranga finished with 2-38.
Earlier Tharanga shared 139 runs for the first wicket with captain Tillakaratne Dilshan, who made 55. He also combined for 81 for the second wicket with Kumar Sangakkara, who hit two sixes and three boundaries for his 49 runs.
Sangakkara was adjudged lbw by Sri Lankan umpire Ranmore Martinesz, whose decision was backed up by the review system. Tharanga was eventually out in the 41st over when he edged seamer Doug Bollinger to wicketkeeper Haddin.
Bollinger finished with the best bowling figures for the visitors with 4-42. Jayawardene made a brisk 36 to help Sri Lanka record its biggest score so far during Australia's tour.
Seam bowlers Mitchell Johnson and Watson picked up two wickets each.
