Windows code exec, SonicWall zero-days, npm botnet malware