The JavaScript, which appeared on the sites at the start of the weekend and vanished by Monday, sits between between HTML comment tags that appear to be an insert from web analytics biz New Relic. Again, it is unlikely that an analytics company would deliberately stash coin-mining scripts onto its customers’ pages, so the code must have come from another source – or was injected by miscreants who had compromised Showtime’s systems.
Source: CBS’s Showtime caught mining crypto-coins in viewers’ web browsers • The Register