Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023